CVE-2026-0277

mediumcovered by 2 sourcesfirst seen 2026-07-08

An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. The Prisma Access Agent on Windows, macOS, Linux, Android and ChromeOS are not affected.

CSIRTS triage

What: There is an improper certificate validation issue on iOS.
Who is affected: Users of Prisma Access Agent on iOS are affected.
Urgency: Remediation is medium urgency due to the potential for exploitation.
Action: Update to the latest version of Prisma Access Agent.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-0277

Get an email if CVE-2026-0277 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all EPSS-scored CVEs.

Advisory coverage (2)

unknownCVE-2026-0277: An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an…nvd · 2026-07-09
mediumCVE-2026-0277 Prisma Access Agent: Improper Certificate Validation on iOS (Severity: MEDIUM)paloalto · 2026-07-08

External references

NVD record for CVE-2026-0277

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-0277 status](https://www.csirts.com/badge/CVE-2026-0277)](https://www.csirts.com/cve/CVE-2026-0277)