References https://horizon3.ai/attack-research/disclosures/palo-alto-expedition-from-n-day-to-full-compromise/ https://beazley.security/alerts-advisories/critical-vulnerability-in-palo-alto-expedition-cve-2024-9464-and-cve-2024-9465 https://security.paloaltonetworks.com/PAN-SA-2024-0010 https://nvd.nist.gov/vuln/detail/cve-2024-9465 https://www.wiz.io/blog/palo-alto-networks-expedition-critical-vulnerabilities-advisory https://github.com/horizon3ai/CVE-2024-9465 https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34884
Related VulnerabilitiesPalo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞(CVE-2026-0257)Palo Alto Networks Expedition /API/regionsDiscovery.php 命令执行漏洞(CVE-2025-0107)Cambium Networks Canopy /login.cgi 默认口令漏洞Palo Alto Expedition /bin/configurations/parsers/Checkpoint/CHECKPOINT.php SQL 注入漏洞(CVE-2024-9465)(CVE-2025-4617)Palo Alto Networks Prisma Browser截图控制绕过漏洞(CVE-2025-4618)Palo Alto Networks Prisma Browser敏感信息泄露漏洞CVE-2023-20888: VMware Aria Operations for Networks - Remote Code ExecutionPaloAlto-Expedition OS命令注入漏洞 (CVE-2025-0107)PoCCVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site ScriptingPoCCVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-ScriptingPoCCVE-2023-20889: VMware Aria Operations for Networks - Code Injection Information Disclosure VulnerabilityPoCCVE-2024-5910: Palo Alto Expedition - Admin Account Takeover