CVE-2025-0132 — Cortex XDR Broker VM: Unauthenticated User Can Disable Internal Services
A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The at…
Published: 2025-05-14 · CVSS: 6.9 · CVSS 4.0
A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7