CVE-2026-0277
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
An improper certificate validation vulnerability in the Prisma Access Agent for iOS allows an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. Other platforms (Windows, macOS, Linux, Android, ChromeOS) are not affected.
Risk Assessment
An attacker can intercept, read, or modify VPN traffic from iOS devices, potentially leading to exposure of sensitive organizational data.
Recommendation
Immediately update the Prisma Access Agent on iOS devices to the latest available version that addresses this vulnerability.
Other vulnerabilities in Prisma Access Agent
See all- CVE-2026-0278High
Multiple protection mechanism failures in the Data Loss Prevention (DLP) component of the Prisma Access Agent for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.
- CVE-2026-0271High
A privilege escalation vulnerability in the Palo Alto Networks Prisma Access Agent on Linux devices allows a local user to execute code with elevated privileges.
- CVE-2026-0268Medium
A security control bypass vulnerability was found in Prisma Access Agent for Linux. A local attacker can route network traffic outside the VPN tunnel, bypassing security policies.
- CVE-2026-0248Medium
An improper certificate validation vulnerability in the Prisma Access Agent for Android and Chrome OS allows a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information.
- CVE-2026-0247High
Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent allow a local attacker to bypass authentication controls and execute privileged operations.
- CVE-2026-0245Medium
Multiple information disclosure vulnerabilities in Prisma Access Agent allow a local user to access sensitive configuration data and credentials. The vulnerability affects the agent on Windows and macOS systems.
Original NVD description (English source)
An improper certificate validation vulnerability in the Prisma® Access Agent for iOS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. The Prisma Access Agent on Windows, macOS, Linux, Android and ChromeOS are not affected.