CVE-2026-0232: Palo Alto Networks Cortex Xdr Agent

Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days.

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.

Affected products

• Palo Alto Networks Cortex Xdr Agent: from 8.7.0, before 8.7.101 (fixed in 8.7.101); version 7.9 only; version 8.3 only; version 8.9.0 only; version 9.0.0 only

Published 2026-04-13. Last modified 2026-07-07.