Palo Alto Networks Prisma Access Vulnerabilities & Security Advisories
28 advisories tracked · Palo Alto Networks Security Advisories · 4 listed in the CISA Known Exploited Vulnerabilities catalog
Every row below is a published Palo Alto Networks advisory that VulniPulse classified as Prisma Access, with the CVEs, affected and fixed releases and exploitation status the vendor stated. Severity mix: 2 critical, 15 high, 8 medium.
Android app · Google Play
Monitor Palo Alto CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Source
Palo Alto Networks Security Advisories
Polled via the official security.paloaltonetworks.com RSS feed. Advisory pages are fetched for new items to extract affected/fixed version tables.
Latest Palo Alto Prisma Access advisories
Critical [CVE-2026-0310] PAN-OS: Buffer Overflow Vulnerability via XML Processing
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing Affected products named by the advisory: Cloud NGFW; Prisma Access.
High [CVE-2026-0306] Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
Medium [CVE-2026-0305] Prisma Access Agent: Information Disclosure Vulnerability on Linux
CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux
High [CVE-2026-0294] Prisma Access Agent: Local Privilege Escalation
CVE-2026-0294 Prisma Access Agent: Local Privilege Escalation
High [CVE-2026-0293] Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
Medium [CVE-2026-0292] Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
Medium [CVE-2026-0291] Prisma Access Agent: Authenticated Limited File Deletion on Linux
CVE-2026-0291 Prisma Access Agent: Authenticated Limited File Deletion on Linux
Medium [CVE-2026-0301] PAN-OS: Information Disclosure Vulnerability in URL Filtering
CVE-2026-0301 PAN-OS: Information Disclosure Vulnerability in URL Filtering Affected products named by the advisory: Cloud NGFW; Prisma Access.
Critical [CVE-2026-0288] PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic. The security risk posed by this issue is minimized when the User-ID Terminal Server Agent connectivity is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines. Panorama is not impacted by this vulnerability. Affected products named by the advisory: Prisma Access.
High [CVE-2026-0277] Prisma Access Agent: Improper Certificate Validation on iOS
An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. The Prisma Access Agent on Windows, macOS, Linux, Android and ChromeOS are not affected.
High [CVE-2026-0278] Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.
High [CVE-2026-0287] PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing
Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts to trigger this condition result in the firewall entering maintenance mode. Panorama is not impacted by these vulnerabilities. Affected products named by the advisory: Cloud NGFW; Prisma Access.
Medium [CVE-2026-0279] PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
CVE-2026-0279 PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities Affected products named by the advisory: Prisma Access.
Medium [CVE-2026-0280] PAN-OS: IPv6 Firewall Policy Bypass
CVE-2026-0280 PAN-OS: IPv6 Firewall Policy Bypass Affected products named by the advisory: Prisma Access.
High [CVE-2026-0271] Prisma Access Agent: Local Privilege Escalation by Authorized Users
CVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized Users
Medium [CVE-2026-0268] Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux
CVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux
High [CVE-2026-0257] PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
CVE-2026-0257 PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities Affected products named by the advisory: Prisma Access.
High [CVE-2026-0262] PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
CVE-2026-0262 PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing Affected products named by the advisory: Prisma Access.
High [CVE-2026-0243] denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices
A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to cause a system disruption by sending a specially crafted IPv6 packet.
High [CVE-2026-0248] improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS
An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected.