Prisma Access Agent (Paloaltonetworks) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-13. Vendor: Paloaltonetworks.
CVEs of Prisma Access Agent
- CVE-2026-0294 - CVSS 7.8 (high), 2026-08-13: A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code…
- CVE-2026-0293 - CVSS 6 (medium), 2026-08-13: A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper…
- CVE-2026-0292 - CVSS 6 (medium), 2026-08-13: An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass…
- CVE-2026-0291 - CVSS 4.4 (medium), 2026-08-13: An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low…
- CVE-2026-0277 - CVSS 5.9 (medium), 2026-07-09: An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to…
- CVE-2026-0278 - CVSS 7.8 (high), 2026-07-09: Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy…
- CVE-2026-0271 - CVSS 7.8 (high), 2026-06-10: A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with…
- CVE-2026-0268 - CVSS 4.4 (medium), 2026-06-10: A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel. This does…
- CVE-2026-0245 - CVSS 5.5 (medium), 2026-05-13: Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma…
- CVE-2026-0248 - CVSS 6.2 (medium), 2026-05-13: An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle…
- CVE-2026-0247 - CVSS 7.8 (high), 2026-05-13: Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls…
- CVE-2026-0246 - CVSS 7.8 (high), 2026-05-13: A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user…
