Critical Zero-Day Vulnerability in Palo Alto Networks Next-Generation Firewalls

**Critical PAN-OS zero-day (PAN-SA-2024-0015) actively exploited:** A CVSS v4.0 9.3 unauthenticated remote command execution flaw in Palo Alto Networks NGFW management interfaces is being exploited in the wild; attackers have deployed web shells for persistent access, approximately 11,180 internet-exposed management IPs are affected globally (notably U.S., India, Mexico, Thailand, Indonesia), three IPs and a webshell checksum were reported, and Palo Alto has provided mitigation guidance but no patch at publication.