Palo Alto Networks Cortex XDR Broker VM
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-0304 | 20.0.96 – < 32.0.52 | Cortex XDR Broker VM: Privilege Escalation Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-0276 | 20.0.96 – < 31.0.58 | Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability | LOW 1.1 | 0.1 % | ||
| CVE-2026-0231 | 30.0.0 – < 30.0.49 | Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability | MEDIUM 5.7 | 0.2 % | ||
| CVE-2025-2184 | 28.0.0 – < 28.0.52 | Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images | MEDIUM 5.3 | 0.2 % | ||
| CVE-2025-4228 | 27.0.0 – < 27.0.26 | Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability | MEDIUM 4.6 | 0.2 % | ||
| CVE-2025-0134 | 26.0.0 – < 26.0.119 | Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM | MEDIUM 6.5 | 0.5 % | ||
| CVE-2025-0132 | 26.0.0 – < 26.0.119 | Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services | MEDIUM 6.9 | 0.5 % | ||
| CVE-2025-0119 | 1.0.0 – < 26.100.3 | Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM | MEDIUM 6.3 | 0.6 % | ||
| CVE-2025-0113 | 1.0.0 – < 26.0.116 | Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers | MEDIUM 5.3 | 0.3 % |