PT-2025-25360 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM affected versions not specified Description: An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex XDR Broker VM allows an authenticated administrative user to execute certain fil...

The vulnerability of the Broker VM platform’s security layer, Cortex XDR, arises from improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the Broker VM platform’s security platform, Cortex XDR, is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2025-0132

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue...

CVE-2025-0134

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

CVE-2025-0134

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

CVE-2025-0132

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue...

CVE-2025-0134 Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

CVE-2025-0134 Cortex XDR Broker VM: Authenticated Code Injection Vulnerability in Broker VM

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

CVE-2025-0134

CVE-2025-0134 describes a code-injection vulnerability in Palo Alto Networks Cortex XDR Broker VM. An authenticated user can execute arbitrary code with root privileges on the host operating system running the Broker VM. Connected sources corroborate an authenticated-code-injection flaw affecting...

CVE-2025-0132

CVE-2025-0132 affects Palo Alto Networks Cortex XDR Broker VM, exposing a missing authentication flaw that allows an unauthenticated attacker with network access to disable certain internal services on the Broker VM. The CVE is documented with a CVSS 4.0 base vector (AV:N/AC:L/PR:N/UI:N/SI:N/VI:L...

CVE-2025-0132 Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue...

CVE-2025-0132 Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue...

PT-2025-21209 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM affected versions not specified Description: A missing authentication issue allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to...

PT-2025-21211 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Broker Vm

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Broker VM affected versions not specified Description: A code injection issue allows an authenticated user to execute arbitrary code with root privileges on the host operating system running the Broker VM...

CVE-2025-0119

A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM...

CVE-2025-0121

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it...

CVE-2025-0119

A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM...

CVE-2025-0119 Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM

A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM...

CVE-2025-0119 Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM

A command injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM...

CVE-2025-0119

CVE-2025-0119 affects the Palo Alto Networks Cortex XDR Broker VM. An authenticated user can trigger command injection to execute arbitrary OS commands with root privileges on the host running Broker VM. The advisory notes a medium (CVSS 4.0 v) score (6.3 base) with local attack vector, minimal p...