Cybersecurity firm Rapid7 has reported active, limited exploitation of a critical authentication bypass vulnerability in Palo Alto Networks' firewalls, allowing attackers to establish unauthorized VPN connections into corporate networks.