Palo Alto Networks Cortex XDR Broker VM Missing Authentication Vulnerability Allowing Service Disabling

A missing authentication vulnerability exists in Palo Alto Networks Cortex XDR Broker VM versions prior to 26.0.119. This vulnerability allows an unauthenticated user with network access to the Broker VM to disable certain internal services, potentially disrupting functionality.

Impact

Exploitation of this vulnerability can lead to the unauthorized disabling of internal services on the affected Broker VM, which may disrupt normal operations or functionality.

Remediation

Users can upgrade to Cortex XDR Broker VM version 26.0.119 or later to address this vulnerability. For those who have not enabled automatic upgrades, it is recommended to do so to ensure the latest security patches are applied.