CVE-2025-0129

9.3 criticalEPSS 0.2%

Critical (9.3). EPSS 0.2% chance of exploitation in the next 30 days.

An improper exception check in Palo Alto Networks Prisma Access Browser allows a low privileged user to prevent Prisma Access Browser from applying it's Policy Rules. This enables the user to use Prisma Access Browser without any restrictions.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/AU:N/R:U/V:D/RE:L/U:Amber

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWEs: CWE-754, CWE-306
Published: 2025-04-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://security.paloaltonetworks.com/PAN-SA-2025-0008

Check your stack JSON