CVE-2026-0292

🗓️ 13 Aug 2026 01:49:19Reported by palo_altoType

Local admin can bypass security inspection in Prisma Access Agent Windows network driver to inject arbitrary traffic.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2026-0292	13 Aug 202601:49	–	attackerkb
BDU FSTEC	The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, relates to the ability to bypass authentication through spoofing. This allows attackers to carry out spoofing attacks.	7 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-0292	12 Aug 202619:03	–	circl
Cvelist	CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows	13 Aug 202601:49	–	cvelist
EUVD	EUVD-2026-57706	13 Aug 202601:49	–	euvd
NVD	CVE-2026-0292	13 Aug 202603:16	–	nvd
Palo Alto Networks	Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows	12 Aug 202616:00	–	paloalto
Positive Technologies	PT-2026-71375	13 Aug 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-0292: Authentication Bypass by Spoofing	13 Aug 202600:00	–	rapid7
Vulnrichment	CVE-2026-0292 Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows	13 Aug 202601:49	–	vulnrichment

NVD

CNA

Node

AND

paloaltonetworks prisma_access_agentRange<26.3

microsoft windowsMatch-

[
  {
    "vendor": "Palo Alto Networks",
    "product": "Prisma Access Agent",
    "platforms": [
      "Windows"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "26.3",
        "changes": [
          {
            "at": "26.3",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Palo Alto Networks",
    "product": "Prisma Access Agent",
    "platforms": [
      "Linux",
      "macOS",
      "iOS",
      "Android",
      "Chrome OS"
    ],
    "versions": [
      {
        "status": "unaffected",
        "version": "All",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2026-0292

09 Sep 2026 16:31Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.16

CVSS 46.1

EPSS0.0013

SSVC

CWE-290