PT-2025-41452 · Palo Alto Networks · Pan-Os

Visa Inc · Published 2025-08-10 · Updated 2025-10-22 · CVE-2025-4615

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description An improper input neutralization issue exists in the management web interface. This allows an authenticated administrator to bypass system restrictions and execute arbitrary commands. The risk is reduced when command-line interface access is limited to a small group of administrators. Cloud NGFW and Prisma Access are not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-83

Related Identifiers

BDU:2026-04962

CVE-2025-4615

Affected Products

Pan-Os

References · 10

• 🔥 https://github.com/sh00bx/cve-2025-4615 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-4615 · Security Note
• https://security.paloaltonetworks.com/CVEN-2025-4615 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04962 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4615 · Vendor Advisory
• https://twitter.com/CVEnew/status/1976359033024991558 · Twitter Post
• https://twitter.com/autumn_good_35/status/1976268872211890623 · Twitter Post
• https://security.paloaltonetworks.com/CVE-2025-4615 · Note
• https://reddit.com/r/paloaltonetworks/comments/1odg15e/10217_released_two_new_cves_related_to · Reddit Post
• https://twitter.com/SystemTek_UK/status/1977075025803891199 · Twitter Post