CVE-2026-0304

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.

Score

CVSS 4.0 4.8 Medium

Status

Awaiting Analysis - psirt@paloaltonetworks.com

Published

2026-09-10

Last modified

2026-09-11

Weaknesses

CWE-88

Affected products

• Cortex Xdr Broker Vm (Palo Alto Networks)

References

• https://security.paloaltonetworks.com/CVE-2026-0304