CVEFinder.io

CVE-2026-0248

🔶 medium
Summary

An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected.

CVSS Score
5.9
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-05-13
First Seen: 2026-05-17
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 32.1% of all 365,968 vulnerabilities in our database.

#248,481
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 13, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
🏆 Discovered By
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue. (other)
SSVC data provided by CISA
Last Modified 2026-07-14
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Vector 4.0 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:D/RE:M/U:Amber
CWE IDs (Weakness Types)
CWE-295

📦 Affected Products 1

Vendor Product Status Affected Versions
paloaltonetworks prisma_access_agent Affected
< 26.2.1

🔗 References 1

https://security.paloaltonetworks.com/CVE-2026-0248
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-0291 🔶 medium 4.4 0.1 An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on L... 2026-08-13
CVE-2026-0292 🔶 medium 6.0 0.1 An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enab... 2026-08-13
CVE-2026-0293 🔶 medium 6.0 0.1 A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privi... 2026-08-13
CVE-2026-0294 ⚠️ high 7.8 0.1 A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devic... 2026-08-13
CVE-2026-0277 🔶 medium 5.9 0.2 An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a m... 2026-07-09
CVE-2026-0278 ⚠️ high 7.8 0.2 Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow... 2026-07-09
These CVEs affect the same products