Exploited vulnerabilitiesBriefPublic record
Palo Alto PAN-OS management auth bypass (CVE-2025-0108)
Disclosed 12 Feb 2025 (Assetnote). KEV: 18 Feb 2025.
- Disclosed
What happened
- Disclosed 12 Feb 2025 (Assetnote). KEV: 18 Feb 2025. Exploited after the PoC, chained with CVE-2024-9474.
Live scores
Live scores
CVE-2024-9474- EPSS
- 0.938
very likely to be attacked soon - VEDAS
- 0.987
strong exploit evidence - On CISA KEV
- Yes, since 2024-11-18
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Live scores
CVE-2025-0108- EPSS
- 0.985
very likely to be attacked soon - VEDAS
- 0.989
strong exploit evidence - On CISA KEV
- Yes, since 2025-02-18
Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.