Findings

CVE-2026-0247

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execut…

Published May 13, 2026 · updated Jul 14, 2026 · paloaltonetworks prisma access agent

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 13, 2026 · NIST NVD

    Detected

    Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.

  2. Jul 14, 2026 · NIST NVD

    Updated

    Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.

Affected

  • cpe paloaltonetworks/prisma access agentversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-0247

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-0247

    Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.

    nvd.nist.gov

References