CVE-2025-2183
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2025-2183. We'll provide specific mitigation strategies based on your environment and risk profile.
Description
An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.
Available Exploits
Related News
Affected Products
Affected Versions:
Affected Versions:
EU Vulnerability Database
Monitored by ENISA for EU cybersecurity
ENISA Analysis
An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.
Affected Products (ENISA)
ENISA Scoring
CVSS Score (4.0)
EPSS Score
ENISA References
Data provided by ENISA EU Vulnerability Database. Last updated: August 16, 2025
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
CVSS Scoring
CVSS Score
CVSS Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:X/U:Amber
References
Advisory provided by GitHub Security Advisory Database. Published: August 13, 2025, Modified: August 13, 2025
Social Media Intelligence
Real-time discussions and threat intelligence from social platforms
Questions about 2025-2183 Vulnerability If you look at Palo's announcement here [https://security.paloaltonetworks.com/CVE-2025-2183](https://security.paloaltonetworks.com/CVE-2025-2183) If you look at the reequipment to be vulnerable. For option 1, I do not have that check box for local store, so does that mean that requirement is a negative? However for option 2 it says "GlobalProtect …