CVE-2026-0238

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0238", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "state": "PUBLISHED", "assignerShortName": "palo_alto", "dateReserved": "2025-11-03T20:43:59.121Z", "datePublished": "2026-05-13T18:22:00.405Z", "dateUpdated": "2026-05-13T18:55:30.943Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-05-13T18:22:00.405Z"}, "title": "Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields", "datePublic": "2026-05-13T16:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-153", "descriptions": [{"lang": "en", "value": "CAPEC-153 Input Data Manipulation"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Broker VM", "versions": [{"status": "affected", "version": "30.0", "lessThan": "30.0.24", "changes": [{"at": "30.0.24", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:palo_alto_networks:broker_vm:*:*:*:*:*:*:*:*", "versionEndExcluding": "30.0.24", "versionStartIncluding": "30.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "descriptions": [{"lang": "en", "value": "A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.</p>"}]}], "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0238", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "MODERATE", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "LOW", "baseScore": 1.1, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}], "configurations": [{"lang": "eng", "value": "No special configuration is required to be affected by this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No special configuration is required to be affected by this issue.</p>"}]}], "workarounds": [{"lang": "eng", "value": "No known workarounds exist for this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No known workarounds exist for this issue.</p>"}]}], "solutions": [{"lang": "eng", "value": "Version Minor Version Suggested Solution\nBroker VM 30.0 30.0.24 or earlier Upgrade to 30.0.24 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table class=\"tbl\"><thead><tr><th>Version</th><th>Minor Version</th><th>Suggested Solution</th></tr></thead><tbody><tr><td>Broker VM 30.0</td><td> 30.0.24 or earlier</td><td>Upgrade to&nbsp; 30.0.24 or later.</td></tr></tbody></table>"}]}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Palo Alto Networks is not aware of any malicious exploitation of this issue.</p>"}]}], "timeline": [{"time": "2026-05-13T16:00:00.000Z", "lang": "en", "value": "Initial Publication."}], "credits": [{"lang": "en", "value": "This issue was discovered during an internal penetration test.", "type": "other"}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "x_affectedList": ["Cortex XDR 30.0.0", "Cortex XDR 30.0.1", "Cortex XDR 30.0.2", "Cortex XDR 30.0.3", "Cortex XDR 30.0.4", "Cortex XDR 30.0.5", "Cortex XDR 30.0.6", "Cortex XDR 30.0.7", "Cortex XDR 30.0.8", "Cortex XDR 30.0.9", "Cortex XDR 30.0.10", "Cortex XDR 30.0.11", "Cortex XDR 30.0.12", "Cortex XDR 30.0.13", "Cortex XDR 30.0.14", "Cortex XDR 30.0.15", "Cortex XDR 30.0.16", "Cortex XDR 30.0.17", "Cortex XDR 30.0.18", "Cortex XDR 30.0.19", "Cortex XDR 30.0.20", "Cortex XDR 30.0.21", "Cortex XDR 30.0.22", "Cortex XDR 30.0.23", "Cortex XDR 30.0.24", "Cortex XDR 30.0.25", "Cortex XDR 30.0.26", "Cortex XDR 30.0.27", "Cortex XDR 30.0.28", "Cortex XDR 30.0.29", "Cortex XDR 30.0.30", "Cortex XDR 30.0.31", "Cortex XDR 30.0.32", "Cortex XDR 30.0.33", "Cortex XDR 30.0.34", "Cortex XDR 30.0.35", "Cortex XDR 30.0.36", "Cortex XDR 30.0.37", "Cortex XDR 30.0.38", "Cortex XDR 30.0.39", "Cortex XDR 30.0.40", "Cortex XDR 30.0.41", "Cortex XDR 30.0.42", "Cortex XDR 30.0.43", "Cortex XDR 30.0.44", "Cortex XDR 30.0.45", "Cortex XDR 30.0.46", "Cortex XDR 30.0.47", "Cortex XDR 30.0.48", "Cortex XDR 30.0.49", "Cortex XDR 30.0.50", "Cortex XDR 30.0.51"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-13T18:55:00.471145Z", "id": "CVE-2026-0238", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-13T18:55:30.943Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0238", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-13T18:55:00.471145Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-13T18:55:26.040Z"}}], "cna": {"title": "Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields", "source": {"discovery": "INTERNAL"}, "credits": [{"lang": "en", "type": "other", "value": "This issue was discovered during an internal penetration test."}], "impacts": [{"capecId": "CAPEC-153", "descriptions": [{"lang": "en", "value": "CAPEC-153 Input Data Manipulation"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 1.1, "Automatable": "NO", "attackVector": "LOCAL", "baseSeverity": "LOW", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Broker VM", "versions": [{"status": "affected", "changes": [{"at": "30.0.24", "status": "unaffected"}], "version": "30.0", "lessThan": "30.0.24", "versionType": "custom"}], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>Palo Alto Networks is not aware of any malicious exploitation of this issue.</p>", "base64": false}]}], "timeline": [{"lang": "en", "time": "2026-05-13T16:00:00.000Z", "value": "Initial Publication."}], "solutions": [{"lang": "eng", "value": "Version Minor Version Suggested Solution\nBroker VM 30.0 30.0.24 or earlier Upgrade to 30.0.24 or later.", "supportingMedia": [{"type": "text/html", "value": "<table class=\"tbl\"><thead><tr><th>Version</th><th>Minor Version</th><th>Suggested Solution</th></tr></thead><tbody><tr><td>Broker VM 30.0</td><td> 30.0.24 or earlier</td><td>Upgrade to&nbsp; 30.0.24 or later.</td></tr></tbody></table>", "base64": false}]}], "datePublic": "2026-05-13T16:00:00.000Z", "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0238", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "eng", "value": "No known workarounds exist for this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>No known workarounds exist for this issue.</p>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.", "supportingMedia": [{"type": "text/html", "value": "<p>A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "configurations": [{"lang": "eng", "value": "No special configuration is required to be affected by this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>No special configuration is required to be affected by this issue.</p>", "base64": false}]}], "x_affectedList": ["Cortex XDR 30.0.0", "Cortex XDR 30.0.1", "Cortex XDR 30.0.2", "Cortex XDR 30.0.3", "Cortex XDR 30.0.4", "Cortex XDR 30.0.5", "Cortex XDR 30.0.6", "Cortex XDR 30.0.7", "Cortex XDR 30.0.8", "Cortex XDR 30.0.9", "Cortex XDR 30.0.10", "Cortex XDR 30.0.11", "Cortex XDR 30.0.12", "Cortex XDR 30.0.13", "Cortex XDR 30.0.14", "Cortex XDR 30.0.15", "Cortex XDR 30.0.16", "Cortex XDR 30.0.17", "Cortex XDR 30.0.18", "Cortex XDR 30.0.19", "Cortex XDR 30.0.20", "Cortex XDR 30.0.21", "Cortex XDR 30.0.22", "Cortex XDR 30.0.23", "Cortex XDR 30.0.24", "Cortex XDR 30.0.25", "Cortex XDR 30.0.26", "Cortex XDR 30.0.27", "Cortex XDR 30.0.28", "Cortex XDR 30.0.29", "Cortex XDR 30.0.30", "Cortex XDR 30.0.31", "Cortex XDR 30.0.32", "Cortex XDR 30.0.33", "Cortex XDR 30.0.34", "Cortex XDR 30.0.35", "Cortex XDR 30.0.36", "Cortex XDR 30.0.37", "Cortex XDR 30.0.38", "Cortex XDR 30.0.39", "Cortex XDR 30.0.40", "Cortex XDR 30.0.41", "Cortex XDR 30.0.42", "Cortex XDR 30.0.43", "Cortex XDR 30.0.44", "Cortex XDR 30.0.45", "Cortex XDR 30.0.46", "Cortex XDR 30.0.47", "Cortex XDR 30.0.48", "Cortex XDR 30.0.49", "Cortex XDR 30.0.50", "Cortex XDR 30.0.51"], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:palo_alto_networks:broker_vm:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "30.0.24", "versionStartIncluding": "30.0.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-05-13T18:22:00.405Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0238", "state": "PUBLISHED", "dateUpdated": "2026-05-13T18:55:30.943Z", "dateReserved": "2025-11-03T20:43:59.121Z", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "datePublished": "2026-05-13T18:22:00.405Z", "assignerShortName": "palo_alto"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Broker VM", "vendor": "Palo Alto Networks", "versions": [{"changes": [{"at": "30.0.24", "status": "unaffected"}], "lessThan": "30.0.24", "status": "affected", "version": "30.0", "versionType": "custom"}]}], "source": "psirt@paloaltonetworks.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:paloaltonetworks:broker_vm:*:*:*:*:*:*:*:*", "matchCriteriaId": "963A640C-045D-4FD9-A7DA-B6F5A5F46B4C", "versionEndExcluding": "30.0.24", "versionStartIncluding": "30.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields."}, {"lang": "es", "value": "Una vulnerabilidad en Palo Alto Networks Broker VM permite a un administrador autenticado inyectar contenido arbitrario en ciertos campos de Broker VM."}], "id": "CVE-2026-0238", "lastModified": "2026-10-26T14:10:00.130", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "source": "psirt@paloaltonetworks.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0238", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-13T18:55:00.471145Z", "version": "2.0.3"}}]}, "published": "2026-05-13T19:16:57.417", "references": [{"source": "psirt@paloaltonetworks.com", "tags": ["Vendor Advisory"], "url": "https://security.paloaltonetworks.com/CVE-2026-0238"}], "sourceIdentifier": "psirt@paloaltonetworks.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "psirt@paloaltonetworks.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[30.0,30.0.24)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Broker VM", "source": "cna", "vendor": "Palo Alto Networks"}, "product": "broker_vm", "vendor": "palo_alto_networks"}], "created": "2026-05-13T20:00:04.256261+00:00", "updated": "2026-05-13T21:30:04.586500+00:00", "vendors": ["palo_alto_networks", "palo_alto_networks$PRODUCT$broker_vm"]}