Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

Palo Alto Networks is warning that a critical flaw impacting its PAN-OS software used in its GlobalProtect gateways is being exploited in the wild.
Tracked as CVE-2024-3400, the issue has a CVSS score of 10.0, indicating maximum severity.
"A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature

alert alto attack command command injection critical critical flaw cve cve-2024 cvss cvss score exploited feature flaw gateways globalprotect injection in the wild issue networks palo palo alto palo alto networks palo alto networks pan-os pan pan-os score severity software under vulnerability warning zero-day