CVE-2026-0276

HighCVSS 7.8

Published: 09/07/2026(UTC)Updated: 25/10/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.14%

4th percentile - higher than 4% of all known CVEs

Summary

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM allows a locally authenticated user to perform actions as the root user.

Risk Assessment

An attacker with local access can gain full control over the system, compromising data confidentiality, integrity, and availability.

Recommendation

Apply the security update provided by the vendor immediately and restrict local access to the system.

Other vulnerabilities in Cortex XDR Broker VM

CVE-2026-0304Medium
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.

Original NVD description (English source)

A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions as the root user.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS