CVE-2025-0111Palo Alto Networks PAN-OS File Read Vulnerability

BOD 26-04 remediation window

With CISA's SSVC answers for this CVE (automatable: no, technical impact: partial), BOD 26-04 Table 1 gives 14 days on a publicly exposed asset (row 4) and 14 days on an asset that is not publicly exposed (row 12) ^S06. The catalogue due date, 21 days after the date added, was set before BOD 26-04 took effect on 10 June 2026 ^S06. The directive binds US federal civilian executive branch agencies only.

What CISA says

Short description

Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://security.paloaltonetworks.com/CVE-2025-0111 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0111

CWE in the catalogue

CWE-73

Official links

• CISA KEV catalogue entry cisa.gov
• NVD record nvd.nist.gov

Vendor advisory and patch links

References NVD tags Vendor Advisory or Patch, exactly as NVD lists them.

• https://security.paloaltonetworks.com/CVE-2025-0111 Vendor Advisory

Links in CISA's notes

• https://security.paloaltonetworks.com/CVE-2025-0111
• https://nvd.nist.gov/vuln/detail/CVE-2025-0111

NVD details

CWE (NVD)

CWE-73 by psirt@paloaltonetworks.com, CWE-610 by nvd@nist.gov

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Red

CVSS versions in NVD

V31, V40

Last modified in NVD

2026-06-17T08:25:51.493

Where each value comes from

This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs. Methodology.