CVE-2026-0230

Summary

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent. This issue could be leveraged by malware to perform malicious activity without detection.

Affected Software

VendorProductVersion RangeStatus
Palo Alto NetworksCortex XDR Agent9.1.0unaffected
Palo Alto NetworksCortex XDR Agent9.0.0unaffected
Palo Alto NetworksCortex XDR Agent8.9.0unaffected
Palo Alto NetworksCortex XDR Agent8.7-CE < 8.7.101-CEaffected
Palo Alto NetworksCortex XDR Agent8.3-CE < 8.3.102-CEaffected

Weaknesses

  • CWE-754: CWE-754: Improper Check for Unusual or Exceptional Conditions

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References