Critical vulnerabilities in Palo Alto Expedition: everything you need to know

Palo Alto Networks Expedition contains multiple critical vulnerabilities (OS command injection, SQL injection, cleartext credential storage, and reflected XSS) with CVSS scores up to 9.9 that can enable unauthenticated remote code execution, credential theft, and administrative takeover. All Expedition versions prior to 1.2.96 are affected; upgrade to 1.2.96 or later, restrict access, rotate credentials, monitor specific endpoints (/OS/startup/restore/restoreAdmin.php, /bin/CronJobs.php), and disable unused instances as mitigations.