VULNERABILITY INTELLIGENCE
CVE-2025-4228
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-06-13
Last modified2026-06-17
Description
An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.
Weakness classification
- psirt@paloaltonetworks.com: CWE-266