Approved changes feed: RSS · Atom

cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:7.4.4:-:*:*:*:*:*:*

part: a version: 7.4.4 update: -

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductCortex Xdr Agent (bf5487ae-f1c5-54a5-9a95-d1817cc1c75c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:npm/%40paloaltonetworks/pan-cortex-xdr purl2cpe 2026-06-01 10:16:50.037176
pkg:sourceforge/cortex-xdr purl2cpe 2026-06-01 10:16:50.037178

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0026 vulnerable 2026-06-08 05:39:09.148704 Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability
MEDIUM (6.7)
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version.
Published: 2022-05-11T16:30:25.746Z
Updated: 2024-09-17T01:26:10.764Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.