CVE-2026-0306CWE-693

CVE-2026-0306

published September 10, 2026

CVSS
5.8
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data.

This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

The record
Technical detail
CVSS
5.8 · NONE
CVSS v4.0
5.8 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00105 · 1.0th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2026-09-10T10:17Z
References (1)
https://security.paloaltonetworks.com/CVE-2026-0306 · [email protected]
EPSS history
Timeline
  • 11 SEP 03:16Z
    EPSS moved — → 0%
    epss
  • 10 SEP 05:55Z
    Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
    cvelistv5