Description
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cortex XDR Agent | 9.0 – < 9.0.1, 8.9 – < 8.9.1, 8.7-CE – < 8.7.101-CE, 8.3-CE – < 8.3-CE-CU-2120, 7.9-CE – < 7.9-CE-CU-2120 | 9.0 |
Advisories 1
- WID-SEC-2026-1019 Palo Alto Networks Cortex XDR Agent: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Apr 12, 2026
References
- https://security.paloaltonetworks.com/CVE-2026-0232 vendor-advisory