UpHeron
All vulnerabilities

Servers and applications

CVE-2025-0108

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and…

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 18 Feb 2025.

Severity
High 8.8
Published
12 Feb 2025
Last changed
24 Sept 2026
Added to UpHeron
1 Nov 2026
Fixed in
10.1.14, 10.2.7, 11.1.2, 11.2.4
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • Version 11.2.4-h3
  • Version 11.2.4-h2
  • Version 11.2.4-h1
  • Version 11.2.4
All 151 release lines
  • From 10.1.0 before 10.1.14
  • Version 10.1.14
  • Version 10.1.14-h1
  • Version 10.1.14-h2
  • Version 10.1.14-h3
  • Version 10.1.14-h4
  • Version 10.1.14-h5
  • Version 10.1.14-h6
  • Version 10.1.14-h7
  • Version 10.1.14-h8
  • From 10.2.0 before 10.2.7
  • Version 10.2.7
  • Version 10.2.7-h1
  • Version 10.2.7-h2
  • Version 10.2.7-h3
  • Version 10.2.7-h4
  • Version 10.2.7-h5
  • Version 10.2.7-h6
  • Version 10.2.7-h7
  • Version 10.2.7-h8
  • Version 10.2.7-h9
  • Version 10.2.7-h10
  • Version 10.2.7-h11
  • Version 10.2.7-h12
  • Version 10.2.7-h13
  • Version 10.2.7-h14
  • Version 10.2.7-h15
  • Version 10.2.7-h16
  • Version 10.2.7-h17
  • Version 10.2.7-h18
  • Version 10.2.7-h19
  • Version 10.2.7-h20
  • Version 10.2.7-h21
  • Version 10.2.7-h22
  • Version 10.2.7-h23
  • Version 10.2.8
  • Version 10.2.8-h1
  • Version 10.2.8-h2
  • Version 10.2.8-h3
  • Version 10.2.8-h4
  • Version 10.2.8-h5
  • Version 10.2.8-h6
  • Version 10.2.8-h7
  • Version 10.2.8-h8
  • Version 10.2.8-h9
  • Version 10.2.8-h10
  • Version 10.2.8-h11
  • Version 10.2.8-h12
  • Version 10.2.8-h13
  • Version 10.2.8-h14
  • Version 10.2.8-h15
  • Version 10.2.8-h16
  • Version 10.2.8-h17
  • Version 10.2.8-h18
  • Version 10.2.8-h19
  • Version 10.2.8-h20
  • Version 10.2.9
  • Version 10.2.9-h1
  • Version 10.2.9-h2
  • Version 10.2.9-h3
  • Version 10.2.9-h4
  • Version 10.2.9-h5
  • Version 10.2.9-h6
  • Version 10.2.9-h7
  • Version 10.2.9-h8
  • Version 10.2.9-h9
  • Version 10.2.9-h11
  • Version 10.2.9-h12
  • Version 10.2.9-h13
  • Version 10.2.9-h14
  • Version 10.2.9-h15
  • Version 10.2.9-h16
  • Version 10.2.9-h17
  • Version 10.2.9-h18
  • Version 10.2.9-h19
  • Version 10.2.9-h20
  • Version 10.2.10
  • Version 10.2.10-h1
  • Version 10.2.10-h2
  • Version 10.2.10-h3
  • Version 10.2.10-h4
  • Version 10.2.10-h5
  • Version 10.2.10-h6
  • Version 10.2.10-h7
  • Version 10.2.10-h8
  • Version 10.2.10-h9
  • Version 10.2.10-h10
  • Version 10.2.10-h11
  • Version 10.2.10-h12
  • Version 10.2.10-h13
  • Version 10.2.11
  • Version 10.2.11-h1
  • Version 10.2.11-h2
  • Version 10.2.11-h3
  • Version 10.2.11-h4
  • Version 10.2.11-h5
  • Version 10.2.11-h6
  • Version 10.2.11-h7
  • Version 10.2.11-h8
  • Version 10.2.11-h9
  • Version 10.2.11-h10
  • Version 10.2.11-h11
  • Version 10.2.12
  • Version 10.2.12-h1
  • Version 10.2.12-h2
  • Version 10.2.12-h3
  • Version 10.2.12-h4
  • Version 10.2.12-h5
  • Version 10.2.13
  • Version 10.2.13-h1
  • Version 10.2.13-h2
  • From 11.1.0 before 11.1.2
  • Version 11.1.2
  • Version 11.1.2-h1
  • Version 11.1.2-h2
  • Version 11.1.2-h3
  • Version 11.1.2-h4
  • Version 11.1.2-h5
  • Version 11.1.2-h6
  • Version 11.1.2-h7
  • Version 11.1.2-h8
  • Version 11.1.2-h9
  • Version 11.1.2-h10
  • Version 11.1.2-h11
  • Version 11.1.2-h12
  • Version 11.1.2-h13
  • Version 11.1.2-h14
  • Version 11.1.2-h15
  • Version 11.1.2-h16
  • Version 11.1.2-h17
  • Version 11.1.3
  • Version 11.1.4
  • Version 11.1.4-h1
  • Version 11.1.4-h2
  • Version 11.1.4-h3
  • Version 11.1.4-h4
  • Version 11.1.4-h5
  • Version 11.1.4-h6
  • Version 11.1.4-h7
  • Version 11.1.4-h8
  • Version 11.1.4-h9
  • Version 11.1.4-h10
  • Version 11.1.4-h11
  • Version 11.1.4-h12
  • Version 11.1.5
  • Version 11.1.6
  • From 11.2.0 before 11.2.4
  • Version 11.2.4
  • Version 11.2.4-h1
  • Version 11.2.4-h2
  • Version 11.2.4-h3

Known exploited

CISA name
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due for US agencies
11 Mar 2025
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-0108
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-0108