CVE-2026-0232

EUVD-2026-21895
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.4 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Affected Products (NVD)
VendorProductVersion
paloaltonetworkscortex_xdr_agent
8.7.0 ≤
𝑥
< 8.7.101
paloaltonetworkscortex_xdr_agent
7.9
paloaltonetworkscortex_xdr_agent
8.3
paloaltonetworkscortex_xdr_agent
8.9.0
paloaltonetworkscortex_xdr_agent
9.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.paloaltonetworks.com/CVE-2026-0232