Vulnerability Details CVE-2026-0278
Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls.
The Prisma Access Agent on macOS is not affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 4.7%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2026-0278
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.3
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.3.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.4
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.6
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.7
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:25.7.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:26.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:26.1.1
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:26.1.2
-
cpe:2.3:a:paloaltonetworks:prisma_access_agent:26.2
-
cpe:2.3:o:microsoft:windows:-