Known vulnerabilities in Prisma Access Agent on Windows

Vendor: Palo Alto Networks, Inc.
Software: Prisma Access Agent on Windows
Software CPE: cpe:2.3:a:palo_alto_networks:prisma_access_agent:*:*:*:*:*:*:*:*
Website: https://www.paloaltonetworks.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Prisma Access Agent on Windows Prisma Access Agent on Windows is affected by 7 known vulnerabilities: 1 medium, 6 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143213 - Authentication Bypass by Spoofing
CVE-2026-0292		 CWE-290 Low
No
No
 26.3 16.08.2026 SB20260816157
#VU143212 - Protection Mechanism Failure
CVE-2026-0293		 CWE-693 Low
No
No
 26.3 16.08.2026 SB20260816157
#VU143211 - Uncontrolled Search Path Element
CVE-2026-0294		 CWE-427 Low
No
No
 26.3 16.08.2026 SB20260816146
#VU131442 - Improper Certificate Validation
CVE-2026-0248		 CWE-295 Medium
No
No
 26.2.1 on Android, 26.2.1 on Chrome OS 14.05.2026 SB2026051469
#VU131441 - Missing Authentication for Critical Function
CVE-2026-0247		 CWE-306 Low
No
No
 26.2.1 on macOS, 26.2.1 on Windows 14.05.2026 SB2026051469
#VU131440 - Missing Authorization
CVE-2026-0246		 CWE-862 Low
No
No
 26.2.1 on Linux, 26.2.1 on macOS, 26.2.1 on Windows 14.05.2026 SB2026051469
#VU131437 - Exposure of sensitive information to an unauthorized actor
CVE-2026-0245		 CWE-200 Low
No
No
 26.2.1 on macOS, 26.2.1 on Windows 14.05.2026 SB2026051469