CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM)

Details

Source

Palo Alto Networks Security Advisories (INTL · vendor-psirt · site)

Severity

medium

Published

2026-09-09

Exploitation

Not in CISA KEV at last sync

Original advisory: https://security.paloaltonetworks.com/CVE-2026-0306

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• unknownCVE-2026-0306: A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Pr…nvd

Recent advisories for Prisma Access Agent

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

• unknownCVE-2026-0306: A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Pr…nvd · 2026-09-10
• unknownCVE-2026-0305: An information disclosure vulnerability in the Palo Alto Networks Prisma® Access Agent on Linux…nvd · 2026-09-10
• mediumCVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM)paloalto · 2026-09-09
• unknownCVE-2026-0294: A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on…nvd · 2026-08-13
• unknownCVE-2026-0293: A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker …nvd · 2026-08-13
• unknownCVE-2026-0292: An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Acce…nvd · 2026-08-13

More from Palo Alto Networks Security Advisories

• lowCVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File (Severity: LOW)2026-09-09
• highPAN-SA-2026-0012 Chromium: Monthly Vulnerability Update (September 2026) (Severity: HIGH)2026-09-09
• lowCVE-2026-0302 Checkov by Prisma Cloud: OS Command Injection Vulnerability (Severity: LOW)2026-09-09
• mediumCVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM)2026-09-09
• highCVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH)2026-09-09