← CVE Intelligence

CVE-2026-0232

Cortex XDR Agent: Local Administrator can disable the agent on Windows PUBLISHED

Description (CNA)

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cortex XDR Agentunaffected 9.1.0 before 5.10.14; unaffected 9.0; unaffected 8.9; unaffected 8.7-CE
Palo Alto Networks / Cortex XDR Agentaffected 9.0 before 9.0.1; affected 8.9 before 8.9.1; affected 8.7-CE before 8.7.101-CE; affected 8.3-CE before 8.3-CE-CU-2120; affected 7.9-CE before 7.9-CE-CU-2120

CWE

CWE-15

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.