CVE-2026-0278

UNKNOWN 0.0

Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows

CVSS Score

0.0

EPSS Score

0.2%

EPSS Percentile

5th

Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.

CWE	CWE-693
Vendor	palo alto networks
Product	prisma access agent
Published	Jul 9, 2026
Last Updated	Jul 11, 2026

Stay Ahead of the Next One

Get instant alerts for palo alto networks prisma access agent

Be the first to know when new unknown vulnerabilities affecting palo alto networks prisma access agent are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / Prisma Access Agent

24.0 < 26.2.1

Palo Alto Networks / Prisma Access Agent

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0278

Credits

Daniel Cuthbert and Vladislav Ovitchinikov from Banco Santander