Description
A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.
The attacker must have network access to the Broker VM to exploit this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cortex XDR Broker VM | 26.0.0 – < 26.0.119 | 26.0.119 |
References
- https://security.paloaltonetworks.com/CVE-2025-0132 vendor-advisory