Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
CISA lists this Palo Alto Networks PAN-OS vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.
- Product
- PAN-OS
- Added to KEV
- 18 Feb 2025
- Federal remediation due
- 11 Mar 2025
- Known ransomware use
- Not reported
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.