Dashboard / CVE-2025-4228

CVE-2025-4228

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 29/100
Published: 2025-06-12 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: None
AT: None
VC: Low
VI: Low
VA: Low

Description

An incorrect privilege assignment vulnerability in Palo Alto Networks Cortex® XDR Broker VM allows an authenticated administrative user to execute certain files available within the Broker VM and escalate their privileges to root.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Palo Alto Networks Cortex XDR Broker VM 27.0.0 < 27.0.26

References & Advisories (1)

Bug Bounty Relevance

29 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

4.6 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

EPSS — Exploitation Probability

0.20%
Raw Score 0.001970
Percentile 9.5%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00197
2026-11-13
0.00197
2026-11-12
0.00197
2026-11-10
0.00197
2026-11-09
0.00197
2026-11-08
0.00197
2026-11-07
0.00188
2026-11-06
0.00188
2026-11-05
0.00188
2026-11-04
0.00188
2026-11-03
0.00188

Intelligence Sources

mitre ref →

External Links