UpHeron
All vulnerabilities

Servers and applications

CVE-2025-4231

A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user. The attacker must have network access to the management web interface and successfully authenticate to exploit this issue. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Severity
High 8.6
Published
13 Jun 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
10.2.8, 11.0.3
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 10.2.0 before 10.2.8
  • From 11.0.0 before 11.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-4231
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-4231