CVE-2026-0304 — Cortex XDR Broker VM: Privilege Escalation Vulnerability

CVE-2026-0304

Cortex XDR Broker VM: Privilege Escalation Vulnerability PUBLISHED

Description (CNA)

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XDR Broker VM	affected 20.0.96 before 32.0.52

CWE

CWE-88

References

https://security.paloaltonetworks.com/CVE-2026-0304

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.