NVD disclosure day

Published threat advisories for February 12, 2025

CVE advisoryKnown Exploit

CVE-2025-0111

Palo Alto Networks PAN-OS File Read Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A vulnerability in Palo Alto Networks PAN-OS allows an authenticated attacker with network access to the management interface to read files readable by the “nobody” user. This could lead to unauthorized access to sensitive information, impacting data security and business operations. Organizations using affected versio

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2025-0108

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

The Palo Alto Networks PAN-OS management web interface has an authentication bypass vulnerability. This allows an unauthenticated attacker with network access to invoke specific PHP scripts, impacting system integrity and confidentiality. Business risk includes unauthorized access to sensitive data and potential system

NVD published: • CISA KEV