Skip to content
NewA calmer, faster ZeroHour
AdvisorycriticalExploited in the wild

More bugs in Palo Alto Expedition see active exploitation, CISA warns

CyberScoopby @chrismvasq ()3 min read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-5910
Unauthenticated Admin Account Takeover in Palo Alto Networks Expedition
9.392%KEVPoC
KEV
CVE-2024-9463
+1 related CVE
Unauthenticated OS Command Injection in Palo Alto Networks Expedition
9.9
group max
99%KEV
KEV
CVE-2024-9464
+1 related CVE
Authenticated OS Command Injection in Palo Alto Networks Expedition
9.3
group max
83%

From the original article

3 min read at cyberscoop.com

Hackers have been actively targeting the firewall management software through multiple vulnerabilities. Palo Alto Networks headquarters in Silicon Valley; Palo Alto Networks, Inc. is an American multinational cyber security company.

CyberScoop

By @chrismvasq · cyberscoop.com

Read the full article at CyberScoop

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.