Skip to content
fr Sign in
6.2 Medium

CVE-2026-0248 An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an…

Description

An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected.

Affected products and versions

Product Affected versions Fixed in
Prisma Access Agent Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Prisma Access Agent

The 14 CVEs of Prisma Access Agent →
CVE-2026-0305 An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user… 4.3 Medium CVE-2026-0306 A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent… 5.8 Medium CVE-2026-0294 A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS… 6.0 Medium CVE-2026-0293 A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator… 5.6 Medium
Track this CVE