Palo Alto Networks has assigned the vulnerability a LOW severity rating but urges administrators to apply patches by upgrading to fixed PAN-OS versions, with timelines extending through August 2025. Reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks’ GlobalProtect gateway and portal features (CVE-2025-0133) has been disclosed, enabling attackers to execute malicious JavaScript in authenticated users’ browsers. […]

The post Critical Vulnerability in Palo Alto GlobalProtect Gateway & Portal Enables Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Source: gbHackers
Source Link: https://gbhackers.com/critical-vulnerability-in-palo-alto-globalprotect-gateway-portal/