CVE-2025-0108: PAN-OS Authentication Bypass Flaw Under Active Exploitation

CVE-2025-0108 is a high-severity authentication bypass vulnerability in Palo Alto Networks’ PAN-OS, allowing unauthenticated attackers to exploit inconsistencies in the management web interface (Nginx, Apache, PHP). While it does not enable remote code execution, it compromises system integrity. Palo Alto Networks has released patches, and active exploitation has been observed since the PoC became available on February 13, 2025. Organizations should update immediately and restrict management access to trusted IPs to mitigate risks.