6.8
Medium
CVE-2025-0115 A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read…
Description
A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PAN-OS 11.2 | 11.2.0 → < 11.2.3 | 11.2.3 |
| PAN-OS 11.1 | 11.1.0 → < 11.1.5 | 11.1.5 |
| PAN-OS 11.0 | 11.0.0 → < 11.0.6 | 11.0.6 |
| PAN-OS 10.2 | 10.2.0 → < 10.2.11 | 10.2.11 |
| PAN-OS 10.1 | 10.1.0 → < 10.1.14-h11 | 10.1.14-h11 |
| Cloud NGFW | Versions not published | |
| Prisma Access | Versions not published |
Other CVEs of PAN-OS
The 197 CVEs of PAN-OS →
CVE-2026-0316
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious…
1.1
Low
CVE-2026-0317
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only…
1.2
Low
CVE-2026-0318
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software…
4.6
Medium
CVE-2026-0319
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables…
4.9
Medium