CVE-2026-0247: Palo Alto Networks Prisma Access Agent

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.

Affected products

• Palo Alto Networks Prisma Access Agent: before 26.2.1 (fixed in 26.2.1)

Published 2026-05-13. Last modified 2026-07-14.