22,500 Palo Alto firewalls "possibly vulnerable" to ongoing attacks

Approximately 22,500 exposed Palo Alto GlobalProtect firewall devices are likely vulnerable to the CVE-2024-3400 flaw, a critical command injection vulnerability that has been actively exploited in attacks since at least March 26, 2024. [...]

actively exploited alto attacks command command injection command injection vulnerability critical cve cve-2024 cve-2024-3400 devices exploited exposed firewall firewalls flaw globalprotect injection march palo palo alto security vulnerability vulnerable