AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-2183

UNKNOWN · CVSS N/A EPSS 0.11%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-08-13 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It affects Palo Alto.

CVE
CVE-2025-2183
Severity
UNKNOWN
CVSS
N/A
EPSS
0.11%
Palo Alto

Original NVD Description

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.