3 Critical Vulnerabilities Added To CISA Exploited List

**Executive Summary:** The Cybersecurity and Infrastructure Security Agency (CISA) added three actively exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog — CVE-2024-1212 (critical OS command injection in Progress Kemp LoadMaster allowing arbitrary command execution and potential root compromise), CVE-2024-0012 (critical PAN-OS authentication bypass enabling unauthenticated admin access), and CVE-2024-9474 (PAN-OS privilege escalation enabling root access post-compromise) — and urges immediate patching and restriction of management interfaces.