Palo Alto Networks warns of potential PAN-OS RCE vulnerability

Palo Alto Networks warned customers to restrict Internet access to PAN-OS management interfaces due to a claimed remote code execution issue (PAN-SA-2024-0015) and provided hardening recommendations; separately, CISA alerted to active attacks exploiting a missing-authentication flaw in Expedition (CVE-2024-5910), which can be chained with a public proof-of-concept for CVE-2024-9464 to gain unauthenticated command execution and potentially hijack PAN-OS firewalls, leading to the CVE's inclusion in CISA's Known Exploited Vulnerabilities Catalog.