CVE-2026-0294 in Prisma Access Agent

Resumen

por MITRE • 2026-08-13

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges.

The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Palo Alto
• Reservar: 2025-11-03
• Divulgación: 2026-08-13
• Moderación: aceptado
• Artículo: VDB-389332
• CPE: listo
• CWE: CWE-269 (confirmado)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: medio

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-0294
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-0294
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-0294/