CVE-2026-0306
A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.
- Score
- CVSS 4.0 5.8 Medium
- Status
- Awaiting Analysis - psirt@paloaltonetworks.com
- Published
- 2026-09-10
- Last modified
- 2026-09-10
- Weaknesses
- CWE-693
Affected products
References
- https://security.paloaltonetworks.com/CVE-2026-0306
