6.8
Medium
CVE-2024-5912 An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR…
Description
An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XDR Agent 8.4 | earliest → < 8.4 | 8.4 |
| Cortex XDR Agent 8.3 | earliest → < 8.3-CE | 8.3-CE |
| Cortex XDR Agent 8.2 | 8.2 → < 8.2.2 | 8.2.2 |
| Cortex XDR Agent 7.9 | 7.9-CE → < 7.9.102-CE | 7.9.102-CE |
Other CVEs of Cortex XDR Agent
The 24 CVEs of Cortex XDR Agent →
CVE-2026-0232
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows…
4.0
Medium
CVE-2026-0230
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator…
4.0
Medium
CVE-2025-0121
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a…
6.8
Medium
CVE-2025-0112
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with…
6.8
Medium