Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent. This issue could be leveraged by malware to perform malicious activity without detection.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-11 | 2 | Disclosure2 |
| 2026-03-12 | 1 | Disclosure1 |
CVE-2026-0230 A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent. This issue could be leverag… https://www.cve.org/CVERecord?id=CVE-2026-0230
Post summary
The post merely announces CVE‑2026‑0230, describing a flaw where local admin users can disable the Cortex XDR agent on macOS, with no evidence of exploitation, PoC, or patch information.
Paloaltoの脆弱性情報 「CVE-2026-0230 Cortex XDR Agent: Local Administrator can disable the agent on macOS (Severity: MEDIUM)」が公開されました。 → https://security.paloaltonetworks.com/CVE-2026-0230
Post summary
The post announces a new medium‑severity CVE (CVE-2026-0230) for Palo Alto Cortex XDR Agent, noting that a local administrator can disable the agent on macOS. No PoC, exploit, patch, or active exploitation claims are provided.
[Palo Alto Networks Security Advisories] CVE-2026-0230 Cortex XDR Agent: Local Administrator can disable the agent onmacOS - https://www.redpacketsecurity.com/palo_alto_networks_security_advisories_cve-2026-0230-cortex-xdr-agent-local-administrator-can-disable-the-agent-onmacos/ #OSINT #ThreatIntel #CyberSecurity #palo_alto
Post summary
The advisory announces CVE-2026-0230, a flaw in Palo Alto Cortex XDR Agent that allows local administrators on macOS to disable the agent, with technical details provided but no proof of exploitation or patch information.