VULNERABILITY INTELLIGENCE
CVE-2026-0245
CVSS score5.5 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2026-05-13
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials. The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.
Weakness classification
- psirt@paloaltonetworks.com: CWE-200
Primary references
- psirt@paloaltonetworks.com — Vendor Advisory