CVE-2024-9474

Palo Alto Networks PAN-OS management interface suffered an OS command injection vulnerability allowing privilege escalation.

An OS command injection flaw in the PAN-OS management interface allowed attackers to escalate privileges via the web-based management interface on firewalls and VPN concentrators. This is critical for DIB organizations relying on Palo Alto firewalls, as it directly enables remote code execution and aligns with CISA's KEV list, indicating active exploitation. Organizations must immediately patch PAN-OS and restrict management interface access to mitigate this high-embarrassment failure.

Shame score — A critical OS command injection flaw in a widely deployed firewall OS was actively exploited in the wild and linked to ransomware, demonstrating severe negligence and avoidability.