CISA Includes Vulnerabilities of Palo Alto Networks and SonicWall in List of Exploited Weaknesses
On Tuesday, the United States Cybersecurity and Infrastructure Security Agency (CISA) included two security weaknesses affecting Palo Alto Networks PAN-OS and SonicWall SonicOS SSLVPN in its catalog of Known Exploited Vulnerabilities (KEV) due to confirmed instances of active exploitation. The vulnerabilities are detailed as follows –
CVE-2025-0108 (CVSS score: 7.8) – A security loophole allowing authentication bypass in Palo Alto Networks PAN-OS
