CVE-2025-0114

PAN-OS: Denial of Service (DoS) in GlobalProtect

Severity: High7.5CVSS 3.1, High
EPSS: 0.41%
Published: 12 Mar 2025
Updated: 17 Jun 2026

Description

Title, description and vendor guidance are quoted from the source records.

A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect portal and the GlobalProtect gateway. This issue does not apply to Cloud NGFWs or Prisma Access software.

Weakness: CWE-400

Known exploited

Not listed in CISA KEV as of the last check.

Exploit prediction

0.41% probability of exploitation in the next 30 days (percentile 32%).

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the source states, per branch

Versions matched by Patcharo

Palo Alto Networks PAN-OSSource: Palo Alto Networks (CVE record)

Branch	Affected	Fixed in
11.0	>= 11.0.0, < 11.0.2	11.0.2
10.2	>= 10.2.0, < 10.2.5	10.2.5
10.1	>= 10.1.0, < 10.1.14-h11	10.1.14-h11

Versions not listed are stated unaffected by the vendor.

Workaround / Vendor remediation

Workaround · PAN-OS

No workaround or mitigation is available.

Vendor remediation · PAN-OS

Version Minor Version Suggested Solution PAN-OS 11.011.0.0 through 11.0.1Upgrade to 11.0.2 or laterPAN-OS 10.210.2.0 through 10.2.4 Upgrade to 10.2.5 or laterPAN-OS 10.1 10.1.0 through 10.1.14 Upgrade to 10.1.14-h11 or later All other older unsupported PAN-OS versions Upgrade to a supported fixed version.

References

https://security.paloaltonetworks.com/CVE-2025-0114(opens in a new tab)

Provenance

Every fact on this page comes from the sources below. Nothing is written by an AI.

Palo Alto Networks (CVE record): Palo Alto Networks (CVE record) · 27 Sept 2026, 23:46 UTC · Parser patcharo-cve5/1.1.0
NVD: NVD · 27 Sept 2026, 23:44 UTC · Parser patcharo-nvd/1.0.0
FIRST EPSS: FIRST EPSS · 27 Sept 2026, 23:46 UTC · Parser patcharo-epss/1.0.0

Last verified: 28 Sept 2026, 02:31 UTC