Vulnerability Details CVE-2026-0245
Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials.
The Prisma Access Agent on Linux, ChromeOS, Android, and iOS are not affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.8%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2026-0245
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.3
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.3.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.4
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.6
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.7
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.7.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:26.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:26.1.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:26.1.2
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:26.2
-
-
cpe:2.3:o:microsoft:windows:-