Skip to content
Threat Feed
Subscribe

Tag

Cortex-Xdr

3 briefs RSS
medium threat

Cortex XDR Broker VM Privilege Escalation Vulnerability

A privilege escalation vulnerability (CVE-2026-0304) in Palo Alto Networks Cortex XDR Broker VM allows an authenticated, low-privileged attacker with man-in-the-middle positioning to execute arbitrary code as root.

exploited Cortex XDR Broker VM vulnerability privilege-escalation cortex-xdr
1t
low advisory

CVE-2026-0276: Palo Alto Networks Cortex XDR Broker VM Privilege Escalation

A local privilege escalation vulnerability, CVE-2026-0276, in Palo Alto Networks Cortex XDR Broker VM allows a locally authenticated low-privileged user to gain root access, potentially leading to compromise of the security solution itself.

Cortex XDR Broker VM privilege-escalation vulnerability palo-alto-networks cortex-xdr
1t
medium advisory

Abuse of Predefined BIOCs in Palo Alto Cortex XDR

Attackers may decrypt and abuse predefined Behavioral Indicators of Compromise (BIOCs) in Palo Alto Cortex XDR to evade detection or manipulate the system.

Cortex XDR cortex-xdr bioc evasion
2r 1t