Tag
low
advisory
CVE-2026-0276: Palo Alto Networks Cortex XDR Broker VM Privilege Escalation
1 TTPA local privilege escalation vulnerability, CVE-2026-0276, in Palo Alto Networks Cortex XDR Broker VM allows a locally authenticated low-privileged user to gain root access, potentially leading to compromise of the security solution itself.
Cortex XDR Broker VM
privilege-escalation
vulnerability
palo-alto-networks
cortex-xdr
1t
medium
advisory
Abuse of Predefined BIOCs in Palo Alto Cortex XDR
2 rules 1 TTPAttackers may decrypt and abuse predefined Behavioral Indicators of Compromise (BIOCs) in Palo Alto Cortex XDR to evade detection or manipulate the system.
Cortex XDR
cortex-xdr
bioc
evasion
2r
1t