MEDIUMCVSS 6.5Actively exploited · CISA KEV since 2025-02-20Vulnerability

CVE-2025-0111

Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.

Properties

Euvd product
PAN-OS
Vulnerability name
Palo Alto Networks PAN-OS File Read Vulnerability
First seen
2026-02-26T19:08:49+00:00
Cvss score
6.5
Epss score
0.01999
Last seen
2026-10-19T12:00:27+00:00
Due date
2025-03-13
Euvd assigner
palo_alto
Retrieved at
2026-10-21T01:24:47+00:00
Exploited euvd since
2025-02-20T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2025-02-20
Score
6.5
Euvd base score version
4.0
Fetched at
2026-10-20T10:36:20+00:00
Euvd vendor
Palo Alto Networks
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
In Signal since
initial import (Sep 2026)
Euvd base score
7.1

Related Entities (48 · showing 24)

AFFECTS_PRODUCT (44 · showing 20)

→[Product]cpe:2.3:o:paloaltonetworks:pan-os:11.2.4:h2:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h8:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h10:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h6:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h15:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h12:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h16:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h21:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:-:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h18:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h2:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h4:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h18:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h19:*:*:*:*:*:*
→[Product]cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*

HAS_WEAKNESS (2)

→[Weakness]Externally Controlled Reference to a Resource in Another Sphere
→[Weakness]External Control of File Name or Path

DESCRIBES (1)

←[KEVEntry]Palo Alto Networks PAN-OS File Read Vulnerability

INVOLVES (1)

←[Signal]kev_added · 2025-02-20

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2025-0111 (CVSS 6.5) — Ninja Signal Threat Intelligence | Ninja Signal