Live › vulnerability › CVE-2024-5910
Go to dashboardPalo Alto Networks Expedition, a migration tool for firewall configurations, has a missing authentication flaw that lets a network attacker take over an Expedition admin account. The attacker can then reach configuration secrets, credentials and other stored data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Palo Alto Networks Expedition | vendor | – | – |
| paloaltonetworks expedition | vendor | >= 1.2.0, < 1.2.92 | 1.2.92 |
Identify any Expedition instances on the network and confirm their version against the vendor advisory; the sources do not give a version or command.
Apply the vendor mitigations per Palo Alto Networks' instructions, or discontinue use of Expedition if mitigations are unavailable (per CISA required action).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition.
Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.
This page as .md · .json · in your agent: get_signal("CVE-2024-5910")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.