CVE Watch—

CVE-2025-0108

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CVSS

—

No CVSS

EPSS

98.4%

p100

KEV

YES

Feb 18, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

98.3%EPSS · 30 days98.4%

2026-06-302026-07-16

KEV catalog record

Product

Palo Alto Networks / PAN-OS

Vulnerability

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Added to KEV

Feb 18, 2025

Remediate by

Mar 11, 2025

Known ransomware use

Summary description

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://security.paloaltonetworks.com/CVE-2025-0108 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0108

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-3400—

100.0%

KEV—80Palo Alto Networks PAN-OS Command Injection Vulnerability—CVE-2024-0012—

100.0%

KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability—CVE-2017-15944—

99.9%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2024-9474—

99.8%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability—CVE-2026-0257—

99.7%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2019-1579—

98.4%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—