5.7
Medium
CVE-2026-0277 An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a…
Description
An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. The Prisma Access Agent on Windows, macOS, Linux, Android and ChromeOS are not affected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Prisma Access Agent | Versions not published |
Other CVEs of Prisma Access Agent
The 14 CVEs of Prisma Access Agent →
CVE-2026-0305
An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user…
4.3
Medium
CVE-2026-0306
A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent…
5.8
Medium
CVE-2026-0294
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS…
6.0
Medium
CVE-2026-0293
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator…
5.6
Medium