CVE-2026-0238

Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields

Published May 13, 2026 CVSS 4.0 · 1.1 Low EPSS < 1% KEV · Not listed

Description

A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.

Analysis

Technical impact

An authenticated administrator can inject arbitrary content into certain Broker VM fields due to improper input validation. This flaw enables modification of configuration values such as certificates and keys, potentially undermining the integrity of the Broker VM’s security settings. The vulnerability does not disclose capability for remote code execution or external impact; its effect is limited to compromising internal configuration by users with admin privileges.

Affected Systems

Palo Alto Networks Broker VM 30.0 and earlier versions up to 30.0.24 are affected. The vendor recommends upgrading to broker VM 30.0.24 or later to remediate the flaw.

Risk and Exploitability

The CVSS score of 1.1 reflects a low severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Exploit requires authenticated administrator access; there are no known workarounds. The low impact score and requirement for privileged access reduce overall risk, but patching remains advisable.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Palo Alto Networks

Broker VM

unaffected

Version	Status	Constraints
`30.0`	affected	< 30.0.24

Configuration 1 [-]

cpe:2.3:a:paloaltonetworks:broker_vm:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Palo Alto Networks

Broker Vm

Version	Status	Scheme	Platform
`[30.0,30.0.24)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Backup current Broker VM configuration and certificates
Upgrade Broker VM to version 30.0.24 or later following vendor release procedures
Restrict certificate and key field modifications to authorized administrators only

Generated by OpenCVE AI on May 13, 2026 at 19:51 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact Low

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.098% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://security.paloaltonetworks.com/CVE-2026-0238

History

May 13, 2026 7:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

May 13, 2026 6:30 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.
Title		Broker VM: Improper Input Validation in Broker VM Certificate and Key Fields
First Time appeared		Palo Alto Networks Palo Alto Networks broker Vm
Weaknesses		CWE-20
CPEs		cpe:2.3:a:palo_alto_networks:broker_vm::::::::
Vendors & Products		Palo Alto Networks Palo Alto Networks broker Vm
References		https://security.paloaltonetworks.com/CVE-2026-0238
Metrics		cvssV4_0 `{'score': 1.1, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber'}`