Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks Cortex XDR Broker VM 26.0.119 Clear all filters
TI-2025-00099 CVE-2025-0134 · GHSA-ghvv-mg26-g3c9

Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM

Priority LOW 31

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM.

CVSS 4.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0053 Published 2025-05-14 Fixed in 26.0.119 CWE-94
TI-2025-00097 CVE-2025-0132 · GHSA-26h9-w3fm-wprg

Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services

Priority LOW 37

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00462 Published 2025-05-14 Fixed in 26.0.119 CWE-306