CVE-2026-0306mediumCWE-693

CVE-2026-0306: falha de média gravidade em Palo Alto Networks Prisma Access Agent

Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows

Publicada em

Seguir esta CVE+ Monitorar Prisma Access Agent

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.8epss 0.2%
A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Produtos afetados
Palo Alto Networks · Prisma Access Agent
CVEs relacionadas — Palo Alto Networks Prisma Access Agent

No mesmo produto, das mais perigosas para as menos.

CVE-2026-0277MEDIUMPrisma Access Agent: Improper Certificate Validation on iOSEPSS 0.2%CVE-2026-0292LOWPrisma Access Agent: Local Security Inspection Bypass Vulnerability on WindowsEPSS 0.2%CVE-2026-0248MEDIUMPrisma Access Agent: Improper Certificate Validation VulnerabilityEPSS 0.2%CVE-2026-0294MEDIUMPrisma Access Agent: Local Privilege EscalationEPSS 0.2%CVE-2026-0293MEDIUMPrisma Access Agent: Anti-Tamper Protection Bypass on WindowsEPSS 0.2%CVE-2026-0278MEDIUMPrisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on WindowsEPSS 0.2%