VulnerabilitycriticalExploited in the wild

CISA Flags Two Actively Exploited Palo Alto Flaws; New RCE Attack Confirmed

The Hacker Newsby @TheHackersNewsNov 15, 2024 · 00:00 UTC (Nov 15, 2024)2 min read1

Read at thehackernews.com

Analyze CVE-2024-9463 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-9463 CVE-2024-9465 CVE-2024-5910

Tags: cve-2024-9463 cve-2024-9465 cve-2024-5910 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-5910	Unauthenticated Admin Account Takeover in Palo Alto Networks Expedition	9.3	92%	KEVPoC	Jul 10, 2024 KEV Nov 7, 2024
CVE-2024-9463 +1 related CVE CVE-2024-9465	Unauthenticated OS Command Injection in Palo Alto Networks Expedition	9.9 group max	99%	KEV	Oct 9, 2024 KEV Nov 14, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Nov 15, 2024 Network Security / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that two more flaws impacting the Palo Alto Networks Expedition software have come under active exploitation in the wild.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.