CVE-2025-0132

Medium

Description

A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue.

SeverityMedium

CVSS6.9

Exploit probability—

Product

Paloaltonetworks Cortex Xdr Broker Vm

PublishedMay 14, 2025

First seenMay 14, 2025

Weakness typeCWE-306Missing authentication for critical function

How to fix

Update

paloaltonetworks cortex_xdr_broker_vm26.0.119 or later

Vendor advisories

security.paloaltonetworks.com/CVE-2025-0132

Affected products

Product	Affected versions	Fixed in
paloaltonetworks cortex_xdr_broker_vm	26.0.0 ≤ v < 26.0.119	26.0.119

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.