CVE-2026-0231mediumCWE-497

CVE-2026-0231: falha de média gravidade em Palo Alto Networks Cortex XDR Broker VM

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Publicada em

Seguir esta CVE+ Monitorar Cortex XDR Broker VM

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.7epss 0.2%
An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting.  The attacker must have network access to the Broker VM to exploit this issue.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Produtos afetados
Palo Alto Networks · Cortex XDR Broker VM
CVEs relacionadas — Palo Alto Networks Cortex XDR Broker VM

No mesmo produto, das mais perigosas para as menos.

CVE-2025-0119MEDIUMCortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VMEPSS 0.6%CVE-2025-0134MEDIUMCortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VMEPSS 0.5%CVE-2025-0132MEDIUMCortex XDR Broker VM: Unauthenticated User Can Disable Internal ServicesEPSS 0.5%CVE-2026-0304MEDIUMCortex XDR Broker VM: Privilege Escalation VulnerabilityEPSS 0.3%CVE-2025-0113MEDIUMCortex XDR Broker VM: Unauthorized Access to Broker VM Docker ContainersEPSS 0.3%CVE-2025-2184MEDIUMCortex XDR Broker VM: Secrets Shared Across Multiple Broker VM ImagesEPSS 0.2%