4.8
Medium
CVE-2026-0304 A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low…
Description
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XDR Broker VM 20.0 | 20.0.96 → < 32.0.52 | 32.0.52 |
Other CVEs of Cortex XDR Broker VM
The 9 CVEs of Cortex XDR Broker VM →
CVE-2026-0276
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to…
1.1
Low
CVE-2026-0231
An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to…
5.7
Medium
CVE-2025-2184
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share…
5.3
Medium
CVE-2025-4228
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
4.6
Medium