CVE-2026-0304:详情

CVE-2026-0304

2026-09-10
07h17 +00:00
A03-Injection
2026-09-11
04h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

A privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM enables an authenticated low privileged user with man-in-the-middle (MitM) access to execute code with root privileges on the Broker VM.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-88 Improper Neutralization of Argument Delimiters in a Command
The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

参考资料