CVE-2025-50815

Runtime vulnerability - Palo Alto Networks

Medium CVSS Score: 6.7 Published: 2025-12-12

Description

A remote code execution vulnerability in Palo Alto Networks Runtime allows attackers to bypass authentication. This affects versions prior to 7.92.9.

Affected Systems

Vendor Palo Alto Networks
Product Runtime
Affected Versions < 10.91
CWE ID CWE-22

Mitigation

As a workaround, disable the affected feature until a patch is available.

Fix Instructions

1. Update Runtime to the latest version
2. Apply vendor patch when available
3. Implement network segmentation
4. Monitor for exploitation attempts

References

Risk Assessment

CVSS: 6.7/10

Exploit Available Unknown
Patch Available Yes

Need Help Patching?

Our security team can help assess and remediate this vulnerability in your environment.

Get Help

Stay Ahead of Threats

Subscribe to our vulnerability feed and get instant alerts when new CVEs affect your systems.

Start Monitoring