Product:
Broker VM
Summary
A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields. This could lead to unauthorized modifications and potential exploitation of the system. The issue is classified as having a low base severity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 1.1 | CVE-2026-0238 |
Exploitation
To exploit this vulnerability, an authenticated administrator would need to access the Broker VM and inject arbitrary content into the vulnerable fields. Given the low attack complexity and the lack of specific requirements, this could be performed with minimal effort by someone with the necessary access rights.
Affected Products
- Broker VM: Affected by the vulnerability allowing content injection.
Mitigation
To mitigate this vulnerability, it is recommended that administrators review their access controls and ensure that only trusted personnel have administrative access to the Broker VM. Regular updates and monitoring for unusual activity can also help in reducing the risk of exploitation.