CVE-2025-4619

VERSION MINOR VERSION SUGGESTED SOLUTION Cloud NGFW No action needed. PAN-OS 12.1 No action needed. PAN-OS 11.2 11.2.0 through 11.2.4 Upgrade to 11.2.4-h4 or 11.2.5 or later. 11.2.0 through 11.2.3 Upgrade to 11.2.3-h6 or 11.2.5 or later. 11.2.0 through 11.2.2 Upgrade to 11.2.2-h2 or 11.2.5 or later. PAN-OS 11.1 11.1.0 through 11.1.6 Upgrade to 11.1.6-h1 or 11.1.7 or later. 11.1.0 through 11.1.4 Upgrade to 11.1.4-h13 or 11.1.7 or later. 11.1.0 through 11.1.3 Remain on a version older than 11.1.3-h2 or upgrade to 11.1.4-h13 or 11.1.7 or later. 11.1.0 through 11.1.2 Upgrade to 11.1.2-h18 or 11.1.7 or later. PAN-OS 10.2 10.2.0 through 10.2.13 Upgrade to 10.2.13-h3 or 10.2.14 or later. 10.2.0 through 10.2.12 Upgrade to 10.2.12-h6 or 10.2.14 or later. 10.2.0 through 10.2.11 Upgrade to 10.2.11-h12 or 10.2.14 or later. 10.2.0 through 10.2.10 Upgrade to 10.2.10-h14 or 10.2.14 or later. 10.2.0 through 10.2.9 Upgrade to 10.2.9-h21 or 10.2.14 or later. 10.2.0 through 10.2.8 Upgrade to 10.2.8-h21 or 10.2.14 or later. 10.2.0 through 10.2.7 Upgrade to 10.2.7-h24 or 10.2.14 or later. 10.2.0 through 10.2.4 Remain on a version older than 10.2.4-h25 PAN-OS 10.1 No action needed. All older Upgrade to a supported fixed version. unsupported PAN-OS versions Prisma Access on PAN-OS 11.2.0 through 11.2.4 Upgrade to 11.2.4-h4 or later 10.2.0 through 10.2.10 Upgrade to 10.2.10-h14 or 11.2.4-h4 or later. 10.2.0 through 10.2.4 Remain on a version older than 10.2.4-h25.

Vendor-listed releases

• Cloud NGFW All
• PAN-OS 12.1 All
• PAN-OS 11.2 >= 11.2.2-h2, >= 11.2.3-h6, >= 11.2.4-h4, >= 11.2.5
• PAN-OS 11.1 < 11.1.2-h9, >= 11.1.2-h18, < 11.1.3-h2, < 11.1.4-h4, >= 11.1.4-h13, >= 11.1.6-h1, >= 11.1.7
• PAN-OS 10.2 < 10.2.4-h25, < 10.2.7-h11, >= 10.2.7-h24, < 10.2.8-h10, >= 10.2.8-h21, < 10.2.9-h6, >= 10.2.9-h21, < 10.2.10-h2, >= 10.2.10-h14, >= 10.2.11-h12, >= 10.2.12-h6,
• PAN-OS 10.1 All
• Prisma Access < 10.2.4-h25 on PAN-OS, >= 10.2.10-h14 on PAN-OS, >= 11.2.4-h4 on PAN-OS