CVE-2025-0132: Palo Alto Networks Cortex Xdr Broker Vm

Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days.

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM.  The attacker must have network access to the Broker VM to exploit this issue.

Affected products

• Palo Alto Networks Cortex Xdr Broker Vm: from 26.0.0, before 26.0.119 (fixed in 26.0.119)

Published 2025-05-14. Last modified 2026-06-17.