8.2
High
CVE-2025-0130 A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an…
Description
A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode. This issue does not affect Cloud NGFW or Prisma Access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud NGFW | Versions not published | |
| PAN-OS 11.2 | 11.2.0 → < 11.2.5 | 11.2.5 |
| PAN-OS 11.1 | 11.1.0 → < 11.1.6-h1 | 11.1.6-h1 |
| PAN-OS 10.2 | earliest → < 10.2.0 | 10.2.0 |
| PAN-OS 10.1 | earliest → < 10.1.0 | 10.1.0 |
| Prisma Access | Versions not published |
Other CVEs of Cloud NGFW
The 114 CVEs of Cloud NGFW →
CVE-2026-0316
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious…
1.1
Low
CVE-2026-0317
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only…
1.2
Low
CVE-2026-0318
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software…
4.6
Medium
CVE-2026-0319
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables…
4.9
Medium