Feb 18, 2025

Started

• Closed✓Patched

  SonicWall SonicOS: SonicOS SSLVPN Improper Authentication Vulnerability

  SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication. Added to CISA KEV on 2025-02-18.

  SonicWall SonicOS·Closed Feb 18, 2025·updated Feb 18, 2025

• Closed✓Patched

  Palo Alto Networks PAN-OS: PAN-OS Authentication Bypass Vulnerability

  Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts. Added to CISA KEV on 2025-02-18.

  Palo Alto Networks PAN-OS·Closed Feb 18, 2025·updated Feb 18, 2025