References https://nvd.nist.gov/vuln/detail/CVE-2025-4618 https://www.cvedetails.com/cve/CVE-2025-4618/ https://www.cve.org/CVERecord?id=CVE-2025-4618 https://security.paloaltonetworks.com/PAN-SA-2025-0018 https://security.paloaltonetworks.com/CVE-2025-4618 https://vuldb.com/?id.332509 https://access.redhat.com/security/cve/cve-2025-4618 https://cve.circl.lu/vuln/cve-2025-4618 https://dbugs.ptsecurity.com/vulnerability/PT-2025-46992 https://www.tenable.com/cve/CVE-2025-4618
Related VulnerabilitiesPalo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞(CVE-2026-0257)Palo Alto Networks Expedition /API/regionsDiscovery.php 命令执行漏洞(CVE-2025-0107)PoCprisma-schema-exposure: Exposed Prisma Database Schema - ExposureCambium Networks Canopy /login.cgi 默认口令漏洞(CVE-2025-4617)Palo Alto Networks Prisma Browser截图控制绕过漏洞CVE-2023-20888: VMware Aria Operations for Networks - Remote Code ExecutionPoCCVE-2008-4668: Joomla! Image Browser 0.1.5 rc2 - Local File InclusionPoCCVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site ScriptingPoCCVE-2018-9161: PrismaWEB - Credentials DisclosurePoCCVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-ScriptingPoCCVE-2021-21287: MinIO Browser API - Server-Side Request ForgeryPoCCVE-2021-24409: Prismatic < 2.8 - Cross-Site Scripting