PT-2026-32286 · Palo Alto Networks · Cortex Xdr

Whatthe0Xdoin · Published 2026-04-08 · Updated 2026-05-06 · CVE-2026-0232

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XDR agent on Windows (affected versions not specified)

Description A flaw in the protection mechanism of the agent allows a local Windows administrator to disable the software. This bypass of system configuration or external management controls could be leveraged by malware to perform malicious activities without detection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-15

Related Identifiers

BDU:2026-05155

CVE-2026-0232

Affected Products

Cortex Xdr

References · 6

• https://bdu.fstec.ru/vul/2026-05155 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0232 · Security Note
• https://security.paloaltonetworks.com/CVE-2026-0232 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2043696331244322864 · Twitter Post
• https://twitter.com/mbtechtalker/status/2052002602162761833 · Twitter Post
• https://twitter.com/CVEnew/status/2043733060496306333 · Twitter Post