CVE-2026-0292CWE-290

CVE-2026-0292

Medium · published August 13, 2026

CVSS v3.1
6.0
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic.

The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00130 · 2.4th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2026-08-13T07:16Z
Affected products (1)
ProductVersionsFixed in
paloaltonetworks/prisma_access_agent< 26.326.3
References (1)
https://security.paloaltonetworks.com/CVE-2026-0292 · [email protected]
EPSS history
Timeline
  • 13 AUG 01:49Z
    Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
    cvelistv5