PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What you need to know about CVE-2025-0133

bugcrowd.com | vulnerability | CVE-2025-0133 | #vulnerability | #vpn | #cve-2025-0133 | #palo-alto-networks | #globalprotect | #xbow
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2025-0133 in Palo Alto Networks' GlobalProtect VPN gateway lets attackers hijack sessions via a tampered link. Bugcrowd's Casey Ellis and Von Tran explain the impact for defenders and hackers.
CVE
CVE-2025-0133
Published
Collected

Related coverage

vulnerability · xbow.com
Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN
Details the multiple XSS flaws XBOW found in Palo Alto's GlobalProtect VPN portal (CVE-2025-0133) during a bug bounty run, following analysis of how XML configuration data flows into rendering.
vulnerability · bishopfox.com
PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls
Bishop Fox shares details on PAN-OS CVE-2024-3400, a critical pre-auth RCE chain in GlobalProtect, including bypasses of Palo Alto's interim mitigations and new Threat Prevention rule IDs.
blog · hacktron.ai
When Your VPN Opens Your Private Network to the Public
AI-assisted reverse engineering of stripped PAN-OS binaries uncovered a JWT algorithm confusion flaw in GlobalProtect's Cloud Authentication Service, enabling VPN auth bypass with just a username.
vulnerability · blog.quarkslab.com
Snapshotting our way to CVE-2026-9539
This blog post presents a LibAFL-Qemu based way to explore state machines and why we failed to find CVE-2026-9539.
vulnerability · blog.quarkslab.com
MbedTLS Security Audit
At the request of the Open Source Technology Improvement Fund (OSTIF), Quarkslab performed a security audit of mbedTLS, evaluating the security of the changes in version 4.0.
vulnerability · blog.quarkslab.com
Cato VPN Client: Split-Tunnel and Privilege Escalation (CVE-2026-10739)
Local privilege escalation in the Cato VPN Client through the split-tunnel upload flow, from named pipe to SYSTEM delete and Windows Installer rollback.
Back