CVE-2026-0231CWE-497

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Medium · published March 11, 2026

CVSS v4.0
5.7
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting.

The attacker must have network access to the Broker VM to exploit this issue.

The record
Technical detail
CVSS v4.0
5.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00162 · 5.1th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2026-03-11T18:03Z
EPSS history
Timeline
  • 11 MAR 18:03Z
    Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability
    cvelistv5