Palo Alto Networks Prisma Access Agent
14 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-0305 | 24.0 – < 26.2 | Prisma Access Agent: Information Disclosure Vulnerability on Linux | MEDIUM 4.3 | 0.1 % | ||
| CVE-2026-0306 | < 26.2 | Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows | MEDIUM 5.8 | 0.2 % | ||
| CVE-2026-0294 | < 26.3 | Prisma Access Agent: Local Privilege Escalation | MEDIUM 6.0 | 0.2 % | ||
| CVE-2026-0293 | < 26.3 | Prisma Access Agent: Anti-Tamper Protection Bypass on Windows | MEDIUM 5.6 | 0.2 % | ||
| CVE-2026-0292 | < 26.3 | Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows | LOW 2.1 | 0.2 % | ||
| CVE-2026-0291 | < 26.2.2 | Prisma Access Agent: Authenticated Limited File Deletion on Linux | LOW 1.1 | 0.1 % | ||
| CVE-2026-0277 | < 26.2.1 | Prisma Access Agent: Improper Certificate Validation on iOS | MEDIUM 5.7 | 0.2 % | ||
| CVE-2026-0278 | 24.0 – < 26.2.1 | Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows | MEDIUM 5.8 | 0.2 % | ||
| CVE-2026-0271 | < 26.2.1 | Prisma Access Agent: Local Privilege Escalation by Authorized Users | MEDIUM 5.9 | 0.1 % | ||
| CVE-2026-0268 | < 26.2.1 | Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-0248 | < 26.2.1 | Prisma Access Agent: Improper Certificate Validation Vulnerability | MEDIUM 6.2 | 0.2 % | ||
| CVE-2026-0245 | < 26.2.1 | Prisma Access Agent: Information Disclosure Vulnerabilities | MEDIUM 4.3 | 0.1 % | ||
| CVE-2026-0246 | < 26.2.1 | Prisma Access Agent: Local Privilege Escalation Vulnerability | MEDIUM 5.9 | 0.1 % | ||
| CVE-2026-0247 | < 26.2.1 | Prisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities | MEDIUM 5.9 | 0.2 % |