Patch Now: CISA Warns of Palo Alto Flaw Exploited in the Wild

Attackers are actively exploiting an authentication-bypass vulnerability (CVE-2025-0108, CVSS 8.8) in Palo Alto PAN-OS management interfaces; researchers and CISA report rapid increases in exploit attempts, observed malicious IPs, and chaining with other PAN-OS flaws (CVE-2024-9474 and CVE-2025-0111). Palo Alto has released patches for affected versions and recommends restricting management-interface access and whitelisting trusted IPs; CISA added the flaw to its Known Exploited Vulnerabilities Catalog.