CVE-2025-0132 — Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services

CVE-2025-0132

Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services PUBLISHED

Description (CNA)

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XDR Broker VM	affected 26.0.0 before 26.0.119

CWE

CWE-306

References

https://security.paloaltonetworks.com/CVE-2025-0132

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.