CVE-2026-0292 — MEDIUM (6.0)

Q: How severe is CVE-2026-0292?

CVE-2026-0292 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-0292?

Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Prisma Access Agent, Microsoft Windows.

Vulnerability Description

An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary network traffic. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is not affected.

CVSS Score

6.0

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Paloaltonetworks	Prisma Access Agent	< 26.3
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-290

References

https://security.paloaltonetworks.com/CVE-2026-0292Vendor Advisory

FAQ

What is CVE-2026-0292?

CVE-2026-0292 is a vulnerability with a CVSS score of 6.0 (MEDIUM). An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing th...

How severe is CVE-2026-0292?

CVE-2026-0292 has been rated MEDIUM with a CVSS base score of 6.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-0292?

Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Prisma Access Agent, Microsoft Windows.