Known vulnerabilities in Cortex XDR Broker VM

Vendor: Palo Alto Networks, Inc.
Software: Cortex XDR Broker VM
Software CPE: cpe:2.3:a:palo_alto_networks:cortex_xdr_broker_vm:*:*:*:*:*:*:*:*
Website: https://www.paloaltonetworks.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cortex XDR Broker VM Cortex XDR Broker VM is affected by 8 known vulnerabilities: 1 high, 4 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123988 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-0231		 CWE-497 Low
No
No
 30.0.49 13.03.2026 SB2026031325
#VU114077 - Use of Default Credentials
CVE-2025-2184		 CWE-1392 Medium
No
No
 28.0.52 14.08.2025 SB2025081418
#VU111099 - Incorrect Privilege Assignment
CVE-2025-4228		 CWE-266 Low
No
No
 27.0.26 12.06.2025 SB2025061228
#VU109203 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-0134		 CWE-94 Medium
No
No
 26.0.119 15.05.2025 SB2025051520
#VU109202 - Missing Authentication for Critical Function
CVE-2025-0132		 CWE-306 Medium
No
No
 26.0.119 15.05.2025 SB2025051520
#VU107393 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-0119		 CWE-78 Low
No
No
 26.100.3 11.04.2025 SB2025041131
#VU104027 - Improper Protection of Alternate Path
CVE-2025-0113		 CWE-424 High
No
No
 26.0.116 18.02.2025 SB2025021807
#VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-1135		 CWE-444 Medium
No
No
 25.105.6 06.05.2024 SB2024050631
SB2024050632
SB2024050633
and 40 more