625 matches found
CVE-2026-0289
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...
EUVD-2026-57703
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...
PT-2026-71375
An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iO...
Prisma Access Agent: Local Privilege Escalation
A privilege escalation PE vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges. The Prisma Access Agent on Linux, iOS, Android, and ChromeOS is not affected. Work around: No known workarounds...
Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...
Prisma Access Agent: Authenticated Limited File Deletion on Linux
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS,...
Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iO...
@vertexa/prisma (>=7.8.0, <=7.9.1), @vertexa/prisma-engines (>=7.8.0, <=7.9.1) potentially affected by unknown CVE via @vertexa/prisma-fetch-engine (7.9.1)
@vertexa/prisma-fetch-engine NPM version 7.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on @vertexa/prisma-fetch-engine and may be impacted: - @vertexa/prisma =7.8.0, =7.8.0, =7.9.1 Source cves: unknown CVE Source advisory:...
5 Best AI Detection & Response Platforms for 2026
Compare AI detection & response platforms for 2026, including Dash, Lakera, Operant AI, HiddenLayer and Prisma AIRS, for runtime threat protection and response...
EUVD-2026-52012
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
CVE-2026-3245
A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution...
The vulnerability of the IPv6 packet processing module in the PAN-OS operating system and the Prisma Access cloud security remote access system allows attackers to bypass existing security mechanisms.
The vulnerability of the IPv6 packet processing module in the PAN-OS operating system and the Prisma Access cloud security remote access system is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms...
The vulnerability of the user remote access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent, related to errors in the certificate validation process, allows attackers to carry out “man-in-the-middle” attacks.
The vulnerability of the user remote access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack...
The vulnerability of the DLP agent for remote access to corporate resources and applications by Palo Alto Networks Prisma Access Agent allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DLP agent for remote access to corporate resources and applications by Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the User-ID Terminal Server Agent component of the PAN-OS operating system, as well as the user remote access agent for corporate resources and applications, the Palo Alto Networks Prisma Access Agent, allows a perpetrator to trigger service interruptions or execute arbitrary codes.
The vulnerability of the User-ID Terminal Server Agent component of the PAN-OS operating system, as well as the user remote access agent for corporate resources and applications, namely the Palo Alto Networks Prisma Access Agent, is related to buffer overflow attacks. Exploiting this vulnerabilit...
The vulnerability of the PAN-OS operating system and the Prisma Access cloud security remote access system, related to the lack of protective measures for website structures, allows attackers to execute arbitrary code.
The vulnerability of the PAN-OS operating system and the Prisma Access cloud security remote access system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2026-0278
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention DLP component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected...
CVE-2026-0275
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS...
CVE-2026-0277
An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle MitM attack to intercept VPN traffic. The Prisma Access Agent on Windows, macOS, Linux, Android and ChromeOS are not affected...