6.2
Moyenne
CVE-2026-0248 An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an…
Description
An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Prisma Access Agent | Versions non publiées |
Références
- security.paloaltonetworks.com security.paloaltonetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Prisma Access Agent
Les 14 CVE de Prisma Access Agent →
CVE-2026-0305
An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux enables a local user…
4.3
Moyenne
CVE-2026-0306
A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent…
5.8
Moyenne
CVE-2026-0294
A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS…
6.0
Moyenne
CVE-2026-0293
A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator…
5.6
Moyenne