<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 04 Oct 2026 09:03:15 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-9464 — Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-9464</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Palo Alto Networks Expedition, paloaltonetworks expedition&lt;/p&gt;
&lt;p&gt;An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Palo Alto Networks Expedition, paloaltonetworks expedition&lt;/p&gt;
&lt;p&gt;An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-9464</guid>
    </item>
  </channel>
</rss>
