CVE-2026-0305 in Prisma Access Agent

Riassunto

di MITRE • 10/09/2026

An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user to access sensitive configuration data and credentials.



The Prisma Access Agent on macOS, Windows, iOS, Android and Chrome OS is not affected.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: Palo Alto
• Prenotare: 03/11/2025
• Divulgazione: 10/09/2026
• Moderazione: accettato
• Voce: VDB-401952
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 3.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-0305
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-0305
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-0305/