CVE-2026-0304
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.
Risk Assessment
An attacker with MitM access and low privileges can gain full control over the Broker VM, potentially compromising the security infrastructure.
Recommendation
Update Cortex XDR Broker VM to a version containing the fix and limit MitM attack opportunities through network segmentation.
Other vulnerabilities in Cortex XDR Broker VM
Original NVD description (English source)
A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS