CVE-2025-0124

An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but does not include syste...

CVE-2025-0125

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the...

CVE-2025-0122

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device...

CVE-2025-0128

The CVE-2025-0128 DoS exists in Palo Alto Networks PAN-OS SCEP authentication, allowing an unauthenticated attacker to reboot the firewall and push it into maintenance mode. Cloud NGFW is not affected; Prisma Access is patched. Affected PAN-OS versions include 10.1.x (<10.1.14-h11), 10.2.x (&l...

CVE-2025-0127

CVE-2025-0127 concerns Palo Alto Networks PAN-OS VM-Series. Affected component: PAN-OS software on VM-Series appliances. Issue: an authenticated administrator can bypass restrictions and run arbitrary commands as root via a command-injection vulnerability. Impact described as high, including full...

CVE-2025-0127 PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deploye...

CVE-2025-0125 PAN-OS: Improper Neutralization of Input in the Management Web Interface

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. The attacker must have network access to the...

CVE-2025-0124 PAN-OS: Authenticated File Deletion Vulnerability on the Management Web Interface

An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but does not include syste...

CVE-2025-0124

CVE-2025-0124 (PAN-OS): An authenticated attacker with network access to the PAN-OS management web interface can delete certain files as the "nobody" user (logs/config files; not system files). Affected product: PAN-OS running on Cloud NGFW; not Prisma Access. Root cause: authenticated file delet...

[SECURITY] Fedora 40 Update: openvpn-2.6.14-1.fc40

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

CVE-2025-0122 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device...

CVE-2025-0121

The CVE-2025-0121 entry concerns a null pointer dereference in the Palo Alto Networks Cortex XDR agent running on Windows. The vulnerability allows a low-privileged local user to crash the agent, and, per multiple sources, could enable malware activity that Cortex XDR may be unable to detect. The...

CVE-2025-0120

CVE-2025-0120 affects the Palo Alto Networks GlobalProtect App on Windows. The issue is a privilege management mechanism flaw that can allow a locally authenticated non-admin user to escalate to NT AUTHORITY\SYSTEM, with exploitation requiring a race condition. The vulnerability is described as d...

Palo Alto Networks Cortex XDR Broker VM 操作系统命令注入漏洞

Palo Alto Networks Cortex XDR Broker VM is a secure virtual machine from Palo Alto Networks, Inc. that integrates with Cortex XDR to bridge the network and Cortex XDR. A security vulnerability exists in the Palo Alto Networks Cortex XDR Broker VM, which stems from command injection and could lead...

Palo Alto Networks Cortex XDR Agent 代码问题漏洞

Palo Alto Networks Cortex XDR Agent is an endpoint security software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Cortex XDR Agent that stems from a null pointer dereference that could cause a low-privileged user to crash the agent...

Palo Alto Networks Prisma Access Browser 安全漏洞

Palo Alto Networks Prisma Access Browser is an enterprise security browser from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Prisma Access Browser that stems from improper control behavior...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from an unauthorized administrator potentially viewing plaintext data...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from improper input neutralization and could lead to a malicious administrator impersonating another...

Palo Alto Networks PAN-OS 代码问题漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from a denial of service and could cause an unauthenticated attacker to reboot the system...

Palo Alto Networks PAN-OS 授权问题漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that stems from session fixation and could allow an attacker to impersonate a legitimate user...