CVE-2026-0247

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@paloaltonetworks.com

Published

2026-05-13

Last modified

2026-10-26

Weaknesses

CWE-306

Affected products

• Prisma Access Agent (Palo Alto Networks)
• Prisma Access Agent (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2026-0247