CVE-2026-0246: falha de média gravidade em Palo Alto Networks Prisma Access Agent
Prisma Access Agent: Local Privilege Escalation Vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.1%
A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. This allows the user to execute arbitrary code and read sensitive information otherwise accessible only to privileged accounts.
The Prisma Access Agent on iOS, Android and Chrome OS are not affected.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Produtos afetados
Palo Alto Networks · Prisma Access AgentCVEs relacionadas — Palo Alto Networks Prisma Access Agent
No mesmo produto, das mais perigosas para as menos.
CVE-2026-0277MEDIUMPrisma Access Agent: Improper Certificate Validation on iOSEPSS 0.2%CVE-2026-0292LOWPrisma Access Agent: Local Security Inspection Bypass Vulnerability on WindowsEPSS 0.2%CVE-2026-0248MEDIUMPrisma Access Agent: Improper Certificate Validation VulnerabilityEPSS 0.2%CVE-2026-0294MEDIUMPrisma Access Agent: Local Privilege EscalationEPSS 0.2%CVE-2026-0293MEDIUMPrisma Access Agent: Anti-Tamper Protection Bypass on WindowsEPSS 0.2%CVE-2026-0278MEDIUMPrisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on WindowsEPSS 0.2%