CVE-2026-0232

🗓️ 13 Apr 2026 07:22:48Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 3 Views

CVE-2026-0232 allows a local administrator to disable the Cortex XDR agent on Windows.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2026-0232	13 Apr 202607:22	–	attackerkb
Circl	CVE-2026-0232	8 Apr 202613:04	–	circl
CNNVD	Palo Alto Networks Cortex XDR Agent 安全漏洞	13 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-0232 Cortex XDR Agent: Local Administrator can disable the agent on Windows	13 Apr 202607:22	–	cvelist
EUVD	EUVD-2026-21895	13 Apr 202609:31	–	euvd
NVD	CVE-2026-0232	13 Apr 202608:16	–	nvd
Positive Technologies	PT-2026-32286	8 Apr 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-0232 Cortex XDR Agent: Local Administrator can disable the agent on Windows	13 Apr 202607:22	–	vulnrichment

Vulners

CNA

Node

paloaltonetworks cortex_xdr_agentRange9.0–9.0.1

Node

paloaltonetworks cortex_xdr_agentRange8.9–8.9.1

Node

paloaltonetworks cortex_xdr_agentRange8.7–8.7.101

Node

paloaltonetworks cortex_xdr_agentRange8.3–8.3

Node

paloaltonetworks cortex_xdr_agentRange7.9–7.9

[
  {
    "vendor": "Palo Alto Networks",
    "product": "Cortex XDR Agent",
    "versions": [
      {
        "status": "unaffected",
        "version": "9.1.0",
        "lessThan": "5.10.14",
        "changes": [
          {
            "at": "5.10.14",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "9.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "8.9",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "8.7-CE",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Palo Alto Networks",
    "product": "Cortex XDR Agent",
    "versions": [
      {
        "status": "affected",
        "version": "9.0",
        "lessThan": "9.0.1",
        "changes": [
          {
            "at": "9.0.1",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "8.9",
        "lessThan": "8.9.1",
        "changes": [
          {
            "at": "8.9.1",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "8.7-CE",
        "lessThan": "8.7.101-CE",
        "changes": [
          {
            "at": "8.7.101-CE",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "8.3-CE",
        "lessThan": "8.3-CE-CU-2120",
        "changes": [
          {
            "at": "8.3-CE",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.9-CE",
        "lessThan": "7.9-CE-CU-2120",
        "changes": [
          {
            "at": "7.9-CE",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "cpes": [
      "cpe:2.3:a:palo_alto_networks:cortex_xdr_agent:9.0.0:*:*:*:*:Windows:*:*",
      "cpe:2.3:a:palo_alto_networks:cortex_xdr_agent:8.9.0:*:*:*:*:Windows:*:*",
      "cpe:2.3:a:palo_alto_networks:cortex_xdr_agent:8.7-CE:*:*:*:*:Windows:*:*"
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2026-0232

13 Apr 2026 15:01Current

5.8Medium risk

Vulners AI Score5.8

CVSS 46.7

EPSS0.00019

SSVC

CWE-15