CVE-2026-0304 is a medium severity privilege escalation vulnerability in Palo Alto Networks Cortex XDR Broker VM. It allows an authenticated low privileged user who can perform a man-in-the-middle attack to execute code with root privileges on the Broker VM. No affected versions or patches are specified. No known exploits in the wild have been reported.