Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-0231

22
FAUCET Score

CVE-2026-0231 is an information disclosure vulnerability in Palo Alto Networks Cortex XDR Broker VM, enabling an authenticated user to obtain and modify sensitive configuration information. Exploitation requires network access to the Broker VM and involves triggering a live terminal session via the Cortex UI. With low attack complexity, a successful exploit could lead to high impacts on confidentiality, integrity, and availability. This vulnerability is rated as MEDIUM severity with a CVSSv4 score of 5.7. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
Palo Alto NetworksCortex XDR Broker VM
>= 30.0.0, < 30.0.49CNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 4.0

5.7MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber

Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
HIGH
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
HIGH
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
UNREPORTED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.17%
Probability of exploitation in next 30 days
EPSS Percentile
6.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0017 is in the 44th percentile among its peer group of 3,720 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (12)

astropatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
asustorpatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
langgeniuspatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
lfedgepatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
mattermostpatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
meshtasticpatch availablevia llm_extracted
Fixed in: 30.0.49
meterspherepatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
nvidiapatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
opensslpatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
strapipatch availablevia llm_extracted
Fixed in: 30.0.49
View patch
vantage6patch availablevia llm_extracted
Fixed in: 30.0.49
View patch
paloaltovendor investigatingvia vendor_rss
View patch

Vendor Advisories (12)

paloaltopaloalto:security.paloaltonetworks.com/CVE-2026-0231MEDIUM

CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability (Severity: MEDIUM)

Mar 11, 2026
astrollm-astro-e42737de858198f2MEDIUM

CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
vantage6llm-vantage6-ee36b6ad8fb797e9MEDIUM

CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
strapillm-strapi-5ac087891c431c76MEDIUM

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
opensslllm-openssl-d8f2b20ac8ddef51MEDIUM

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
nvidiallm-nvidia-248f2924627cb15fMEDIUM

CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
asustorllm-asustor-df2f1dba5111e070MEDIUM

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
meterspherellm-metersphere-55640cb0bd5e69d6MEDIUM

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
lfedgellm-lfedge-7382a0b9f57c1593MEDIUM

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
meshtasticllm-meshtastic-b86c7b7fa4725206MEDIUM

CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
langgeniusllm-langgenius-486e111426ea0255MEDIUM

CVE-2026-0231 Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026
mattermostllm-mattermost-d24b97893ca6b8ceMEDIUM

Cortex XDR Broker VM: Sensitive Information Disclosure Vulnerability

Mar 11, 2026

References

security.paloaltonetworks.com / CVE-2026-0231