CVE-2025-2184
Medium
Description
A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credentials for internal services. Users knowing these default credentials could access internal services on other Broker VM installations. The attacker must have network access to the Broker VM to exploit this issue.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Cortex XDR Broker VM
PublishedAug 13, 2025
First seenAug 13, 2025
Weakness typeCWE-1392CWE-1392
How to fix
Update
- Palo Alto Networks Cortex XDR Broker VM28.0.52 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Palo Alto Networks Cortex XDR Broker VM | 28.0.0 ≤ v < 28.0.52 | 28.0.52 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.