CVE-2026-0292: fallo de gravedad baja en Palo Alto Networks Prisma Access Agent
Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 2.1epss 0.2%
An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic.
The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:L/E:U/AU:N/R:A/V:C/RE:M/U:Amber
Productos afectados
Palo Alto Networks · Prisma Access AgentCVEs relacionadas — Palo Alto Networks Prisma Access Agent
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-0277MEDIUMPrisma Access Agent: Improper Certificate Validation on iOSEPSS 0.2%CVE-2026-0248MEDIUMPrisma Access Agent: Improper Certificate Validation VulnerabilityEPSS 0.2%CVE-2026-0294MEDIUMPrisma Access Agent: Local Privilege EscalationEPSS 0.2%CVE-2026-0293MEDIUMPrisma Access Agent: Anti-Tamper Protection Bypass on WindowsEPSS 0.2%CVE-2026-0278MEDIUMPrisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on WindowsEPSS 0.2%CVE-2026-0247MEDIUMPrisma Access Agent Endpoint DLP: Authorization Bypass VulnerabilitiesEPSS 0.2%