CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 13:10 UTC)

What this means for you

This week: 5,477 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,477; Show in the list
Critical, last 7 days: 360; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product paloaltonetworks:prisma_access_agent. Show all products

12 CVEs, showing 1 to 12

CVE	Severity	Title	Published
CVE-2026-0245	Medium 5.5	Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials.	May 13, 2026
CVE-2026-0246	High 7.8	A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their privileges to root on ma…	May 13, 2026
CVE-2026-0247	High 7.8	Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.	May 13, 2026
CVE-2026-0248	Medium 5.9	An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic.	May 13, 2026
CVE-2026-0268	Medium 4.4	A security control bypass vulnerability in Prisma Access Agent for Linux allows a local attacker to route network traffic outside the VPN tunnel.	Jun 10, 2026
CVE-2026-0271	High 7.8	A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma Access Agent app on Linux devices enables a local user to execute code with elevated privileges.	Jun 10, 2026
CVE-2026-0277	Medium 5.9	An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic.	Jul 9, 2026
CVE-2026-0278	High 7.8	Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls.	Jul 9, 2026
CVE-2026-0291	Low 1.1	Prisma Access Agent: Authenticated Limited File Deletion on Linux Assigned by palo_alto	Aug 13, 2026
CVE-2026-0292	Low 2.1	Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows Assigned by palo_alto	Aug 13, 2026
CVE-2026-0293	Medium 5.6	Prisma Access Agent: Anti-Tamper Protection Bypass on Windows Assigned by palo_alto	Aug 13, 2026
CVE-2026-0294	Medium 6.0	Prisma Access Agent: Local Privilege Escalation Assigned by palo_alto	Aug 13, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.