CVE-2025-0132
Last modified
CVE-2025-0132 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
A missing authentication vulnerability in Palo Alto Networks Cortex XDR® Broker VM allows an unauthenticated user to disable certain internal services on the Broker VM. The attacker must have network access to the Broker VM to exploit this issue.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:M/U:Amber
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-0132?
How severe is CVE-2025-0132?
How do I fix CVE-2025-0132?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-0126When configured using SAML, a session fixation vulnerability…8.3
- CVE-2025-0127A command injection vulnerability in Palo Alto Networks PAN-…7.1
- CVE-2025-0128A denial-of-service (DoS) vulnerability in the Simple Certif…8.7
- CVE-2025-0129An improper exception check in Palo Alto Networks Prisma Acc…9.3
- CVE-2025-0130A missing exception check in Palo Alto Networks PAN-OS® soft…7.5
- CVE-2025-0131An incorrect privilege management vulnerability in the OPSWA…7.1
- CVE-2025-0133A reflected cross-site scripting (XSS) vulnerability in the …2.7
- CVE-2025-0134A code injection vulnerability in the Palo Alto Networks Cor…6.5
- CVE-2025-0135An incorrect privilege assignment vulnerability in the Palo …3.3
- CVE-2025-0136Using the AES-128-CCM algorithm for IPSec on certain Palo Al…5.3
- CVE-2025-0137An improper input neutralization vulnerability in the manage…4.8
- CVE-2025-0138Web sessions in the web interface of Palo Alto Networks Pris…2
Are you affected by CVE-2025-0132?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST