Medium severity · published Mar 11, 2026
CVE-2026-0231
Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability
5.7
CVSS
0.2%
EPSS
No
On KEV
Description
An information disclosure vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to obtain and modify sensitive information by triggering live terminal session via Cortex UI and modifying any configuration setting.
The attacker must have network access to the Broker VM to exploit this issue.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CX
Cortex XDR Broker VM · Palo Alto Networks
30.0.0 before 30.0.49 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0231
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0231
security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2026-0231
More from Cortex XDR Broker VM
7.8
CVE-2026-0276
Cortex XDR Broker VM: Privilege Escalation (PE) Vulnerability
4.8
CVE-2026-0304
Cortex XDR Broker VM: Privilege Escalation Vulnerability
