CVE-2025-4615Medium

CVE-2025-4615 PAN-OS: Improper Neutralization of Input in the Management Web Interface

Published
October 8, 2025
Last Modified
April 1, 2026

🔗 CVE IDs covered (1)

CVE-2025-4615 →

📋 Description

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

🎯 Affected products3

  • Cloud NGFW
  • PAN-OS
  • Prisma Access

✅ Remediation

VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW All No action needed. PAN-OS 12.1 No action needed. PAN-OS 11.2 11.2.0 through 11.2.7 Upgrade to 11.2.8 or later. PAN-OS 11.1 11.1.0 through 11.1.4 Upgrade to 11.1.4-h27 or 11.1.6-h21 or 11.1.10-h7 or later. 11.1.4 through 11.1.6 Upgrade to 11.1.6-h21 or 11.1.10-h7 or later. 11.1.8 through 11.1.10 Upgrade to 11.1.10-h7 or later. PAN-OS 10.2 10.2.0 through 10.2.16 Upgrade to 10.2.17 or later. All older   Upgrade to a supported fixed version. unsupported PAN-OS versions Prisma Access All No action needed. Workarounds and mitigations: No known workarounds exist for this issue.

🔗 References (1)