Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What you need to know about CVE-2025-0133

bugcrowd.com | vulnerability | CVE-2025-0133 | #vulnerability | #vpn | #cve-2025-0133 | #palo-alto-networks | #globalprotect | #xbow

Summary

CVE-2025-0133 in Palo Alto Networks' GlobalProtect VPN gateway lets attackers hijack sessions via a tampered link. Bugcrowd's Casey Ellis and Von Tran explain the impact for defenders and hackers.
Published
Collected

original ↗

Related coverage

  1. Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN (xbow.com)
  2. PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls (bishopfox.com)
  3. Critical Vulnerabilities in Ivanti Exploited in-the-Wild: everything you need to know (wiz.io)
  4. Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass (bishopfox.com)
  5. strongSwan CVE-2026-25075: Integer Underflow in VPN Authentication (bishopfox.com)
  6. Bishop Fox ASM Delivers 24-Hour Head Start Against Critical PAN-OS Vulnerability (bishopfox.com)

back