A newly disclosed command injection vulnerability (CVE-2025-4230) in Palo Alto Networks’ PAN-OS allows authenticated administrators to execute arbitrary root-level commands, risking entire network security frameworks. Affecting several PAN-OS versions, this flaw highlights challenges in system integrity. Immediate patching is required, as no workarounds exist, and restricted CLI access can mitigate potential risks.

HashiCorp Nomad Vulnerability Allows Privilege Escalation via ACL Policy Lookup Exploit
A critical vulnerability (CVE-2025-4922) in HashiCorp Nomad allows privilege escalation via improper Access Control List (ACL) policy lookups. Affected versions (1.4.0-1.10.1) can let attackers create