Back to search
CVE-2025-4231
Published: Jun 12, 2025
Modified: Feb 26, 2026
PUBLISHED
Description
A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user. The attacker must have network access to the management web interface and successfully authenticate to exploit this issue. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
| Vendor | Product | Versions |
|---|---|---|
Palo Alto Networks | Cloud NGFW | unaffected All - < 6.3.3 |
Palo Alto Networks | PAN-OS | unaffected 11.2.0unaffected 11.1.0affected 11.0.0 - < 11.0.3affected 10.2.0 - < 10.2.8affected 10.1.0 |
Palo Alto Networks | Prisma Access | unaffected All |
Weaknesses (CWE)
References
https://security.paloaltonetworks.com/CVE-2025-4231
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now