Description
Palo Alto Networks PAN-OS GlobalProtect 是Palo Alto Networks 的一款防火墙产品。Palo Alto Networks PAN-OS Management 管理端权限绕过漏洞。攻击者可构造恶意请求绕过身份认证进入后台，执行恶意操作。
Palo Alto Networks PAN-OS /unauth/%252e%252e/php/ztp_gate.php/PAN_help/x.css 未授权访问漏洞（CVE-2025-0108）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.paloaltonetworks.com/CVE-2025-0108
https://nvd.nist.gov/vuln/detail/CVE-2025-0108
https://slcyber.io/blog/nginx-apache-path-confusion-to-auth-bypass-in-pan-os/
https://blog.csdn.net/yuanlirong22/article/details/145726928
https://cn-sec.com/archives/3736455.html
https://cloud.tencent.com/developer/article/2549743
https://www.ithome.com.tw/news/167368
https://www.greynoise.io/blog/greynoise-observes-active-exploitation-of-pan-os-authentication-bypass-vulnerability-cve-2025-0108