CVE-2025-0130

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 8.2EPSS <1%

Published 2025-05-14Updated 2025-05-14

Media 1459

Vulnerability details

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode. This issue does not affect Cloud NGFW or Prisma Access.

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:L/U:Amber

CNApalo_alto

EPSS score history

Sources

3 links

PoC links are not available for guest users. Login to view them.

CVEShield NVD Analysis CVE Organization

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated