Cortex Xdr Broker Vm
Approved changes feed: RSS · Atom
cpe:2.3:a:palo_alto_networks:cortex_xdr_broker_vm:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Palo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d) |
|---|---|
| Product | Cortex Xdr Broker Vm (f144d781-ead3-5493-8ae8-cafd0c798b58) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0276 |
vulnerable | 2026-07-29 00:20:50.094758 |
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions as the root user.
Published: 2026-07-09T19:17:01.145Z
Updated: 2026-07-14T14:32:13.977Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0231 |
vulnerable | 2026-06-08 07:47:11.157795 |
Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability
An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting.
The attacker must have network access to the Broker VM to exploit this issue.
Published: 2026-03-11T18:03:21.302Z
Updated: 2026-03-11T20:21:35.933Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4228 |
vulnerable | 2026-06-08 07:29:15.785993 |
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.
Published: 2025-06-12T23:41:37.071Z
Updated: 2026-02-26T17:50:38.802Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2184 |
vulnerable | 2026-06-08 07:16:56.339866 |
Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations.
The attacker must have network access to the Broker VM to exploit this issue.
Published: 2025-08-13T17:05:30.544Z
Updated: 2025-08-13T20:33:40.634Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0119 |
vulnerable | 2026-06-08 07:00:29.479800 |
Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM
A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM.
Published: 2025-04-11T17:37:54.484Z
Updated: 2025-04-11T19:00:51.084Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0113 |
vulnerable | 2026-06-08 07:00:29.435309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.