AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Palo Alto NetworksCVE-2026-0276

Palo Alto Networks Cortex XDR Broker VM: privilege escalation

Palo Alto Networks

CVE-2026-0276 · Published Jul 9, 2026 · updated Jul 16, 2026

Low1.1
Fix: upgrade to 31.0.58 or later
Palo Alto Networks advisory

A privilege escalation vulnerability in Palo Alto Networks Cortex® XDR Broker VM enables a locally authenticated user to perform actions as the root user.

Affected versions

PackageAffectedFixed in
Cortex XDR Broker VM
Product
>= 20.0.96, < 31.0.5831.0.58
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-269

More Palo Alto Networks advisories

All Palo Alto Networks
Low 2.0Jul 9Palo Alto Networks Prisma Browser: privilege escalationCVE-2026-0275fixed in 150.33.2.46Medium 5.7Jul 9Palo Alto Networks Prisma Access Agent: improper certificate validationCVE-2026-0277fixed in 26.2.1Medium 5.8Jul 9Palo Alto Networks Prisma: local user could bypass DLP policy enforcement...CVE-2026-0278fixed in 26.2.1Medium 6.0Jul 9Palo Alto Networks PAN-OS: command injectionCVE-2026-0286fixed in 12.1.8 +3Medium 6.6Jul 9Palo Alto Networks Cloud NGFW: denial of serviceCVE-2026-0287fixed in 12.1.4-h8 +5Medium 4.7Jul 9Palo Alto Networks PAN-OS: information disclosureCVE-2026-0284fixed in 12.1.4-h8 +3