Hackers Exploiting Newly Discovered PAN-OS Authentication Bypass Vulnerability

Laminute.info

Factuality

Ownership

The problem does not affect the company's cloud NGFW or Prisma Access software. Greynoise stated that the operation had started on Tuesday of this week. AssetNote published research on the hole on Wednesday. Palo Alto Networks published its opinion on the same day. "A path processing behavior'' Vulnerability," said AssetNote, "is a strange path processing behavior" in the part of the HTTP Apache server of Pan-OS, which, together with Nginx, mana…

Network World

Factuality

Ownership

Palo Alto Networks firewall bug being exploited by threat actors: Report

Admins with firewalls from Palo Alto Networks should make sure the devices are fully patched and the management interface blocked from open internet access after the discovery this week of a zero-day login authentication bypass in the PAN-OS operating system. The discovery of the vulnerability (CVE-2025-0108) was made by researchers at Assetnote and, according to researchers at Greynoise, is already being exploited. For its part, Palo Alto Netwo…

Security Boulevard

Factuality

Ownership

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (CVE-2025-0108)

Overview Recently, NSFOCUS CERT detected that Palo Alto Networks issued a security announcement and fixed the identity bypass vulnerability in PAN-OS (CVE-2025-0108). Due to the problem of path processing by Nginx/Apache in PAN-OS, unauthenticated attackers can bypass authentication to access the management web interface of PAN-OS device and call some PHP scripts, thus obtaining sensitive […] The post Palo Alto Networks PAN-OS Authentication Byp…

Malware Analysis, News and Indicators

Factuality

Ownership

Palo Alto Networks PAN-OS flaw risks authentication bypass

The vulnerability stems from path confusion between Nginx and Apache components. Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate link – your enrollment helps support this platform at no extra cost to you. Article Link: Palo Alto Networks PAN-OS flaw risks authentication bypass

Help Net Security

Factuality

Ownership

PAN-OS authentication bypass hole plugged, PoC is public (CVE-2025-0108) - Help Net Security

Palo Alto Networks has fixed a high-severity PAN-OS authentication bypass vulnerability (CVE-2025-0108), with a public PoC.

The Hacker News

Factuality

Ownership

Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software

Palo Alto Networks has addressed a high-severity security flaw in its PAN-OS software that could result in an authentication bypass. The vulnerability, tracked as CVE-2025-0108, carries a CVSS score of 7.8 out of 10.0. The score, however, drops to 5.1 if access to the management interface is restricted to a jump box. "An authentication bypass in the Palo Alto Networks PAN-OS software enables an