Prisma Access Agent CVE-2026-0306

Improper certificate validation in Palo Alto Networks Prisma Access Agent versions below 26.2.1 on Android and Chrome OS

Privilege escalation via an uncontrolled search path (CWE-427) in Palo Alto Networks Prisma Access Agent on Windows and

Privilege escalation in Palo Alto Networks Prisma Access Agent on Linux allows a locally authenticated low-privileged us

Authorization bypass in Palo Alto Networks Prisma Access Agent's Endpoint DLP component permits a locally authenticated

Local privilege escalation in Palo Alto Networks Prisma Access Agent (all versions prior to 26.2.1) allows any locally a

Multiple protection mechanism failures in the Data Loss Prevention (DLP) component of Palo Alto Networks Prisma Access A

Improper certificate validation in the Palo Alto Networks Prisma Access Agent for iOS exposes VPN tunnel traffic to inte

Anti-tamper protection bypass in Palo Alto Networks Prisma Access Agent on Windows allows a local administrator to gain

Security control bypass in Palo Alto Networks Prisma Access Agent for Linux enables a local, low-privileged attacker to

Information disclosure in the Palo Alto Networks Prisma® Access Agent on Linux allows local low-privileged users to read

Prisma Access Agent on Windows and macOS exposes sensitive configuration data and credentials to local low-privileged us

Authentication bypass in the Windows network driver of Palo Alto Networks Prisma Access Agent allows a local administrat