Information Disclosure Vulnerability in Palo Alto Networks Cortex XDR® Broker VM
CVE-2026-0231

5.7MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Cortex Xdr Broker Vm
Vendor
CVE Published:
11 March 2026

Badges

👾 Exploit Exists

What is CVE-2026-0231?

An information disclosure vulnerability exists in Palo Alto Networks Cortex XDR® Broker VM that enables an authenticated user to access and modify sensitive configurations. By initiating a live terminal session through the Cortex UI, the attacker can manipulate settings, potentially compromising the confidentiality and integrity of the system. Network access to the Broker VM is required for exploitation, highlighting the need for robust network security measures to protect sensitive environments.

Affected Version(s)

Cortex XDR Broker VM 30.0.0 < 30.0.49

References

https://security.paloaltonetworks.com/CVE-2026-0231
vendor-advisory

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

an internal reporter, Nicola Kalak,
.