CVEvulnerability

CVE-2026-0292

2.1 LOW Published 2026-08-13 Modified 2026-10-23 Official page ↗
Status
Analyzed
Published
2026-08-13
Last modified
2026-10-23
Assigner
[email protected]
CVSS 4.0 ([email protected])
2.1 LOW — CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:H/SI:H/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:C/RE:M/U:Amber
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-290

Description

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Affected configurations

• paloaltonetworks prisma access agent (< 26.3)

Related

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References