Back to search
CVE-2025-4228
Published: Jun 12, 2025
Modified: Feb 26, 2026
PUBLISHED
Description
An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.
| Vendor | Product | Versions |
|---|---|---|
Palo Alto Networks | Cortex XDR Broker VM | affected 27.0.0 - < 27.0.26 |
Weaknesses (CWE)
References
https://security.paloaltonetworks.com/CVE-2025-4228
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now