What’s Vulnerable › Vulnerabilities

CVE-2024-8690: Cortex XDR Agent: Local Windows Administrator Can Disable the Agent

• Severity: medium (CVSS 4.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-11 · updated 2026-06-17
• Weakness: CWE-440

Description

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

Affected products

• Palo Alto Networks Cortex XDR Agent: 7.9.102
• Palo Alto Networks Cortex XDR Agent: 7.9.102-CE

References

• https://security.paloaltonetworks.com/CVE-2024-8690

Get alerted when CVE-2024-8690 or the next vulnerability affects your stack