Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
4149 articles · 197447 vulns · 37/41 feeds (7d)
← Back to list
7.5
CVE-2026-0278PATCHED
Palo Alto Networks · Prisma Access Agent

Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows

Description

Multiple protection mechanism failures in the Prisma Access Agent Data Loss Prevention (DLP) component for Windows allow a local user to bypass DLP policy enforcement controls. The Prisma Access Agent on macOS is not affected.

Affected Products

VendorProductVersions
Palo Alto NetworksPrisma Access Agent24.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
palo alto networksprisma accessmitre_affected90%

References

  • https://security.paloaltonetworks.com/CVE-2026-0278(vendor-advisory)

Related News (2 articles)

Tier C
VulDB47d ago
CVE-2026-0278 | Palo Alto Prisma Access Agent Data Loss Prevention protection mechanism
→ No new info (linked only)
Tier B
CERT-FR47d ago
Multiples vulnérabilités dans les produits Palo Alto Networks (09 juillet 2026)
→ No new info (linked only)
CVSS 3.17.5 NONE
CISA KEV❌ No
Actively exploited❌ No
Patch available
26.2.1All
CWECWE-693
PublishedJul 9, 2026
Last enriched47d agov2
Tags
CVE-2026-0278
Trending Score0
Source articles2
Independent2
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-0288
PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent
Trending: 1
NONECVE-2026-0284EXP
PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)
NONECVE-2026-0275
Prisma Browser: Local Privilege Escalation on macOS
NONECVE-2026-0279EXP
PAN-OS: Multiple Cross-Site Scripting (XSS) Vulnerabilities
NONECVE-2026-0286EXP
PAN-OS: Authenticated Command Injection in CLI

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 9, 2026
Discovered by ZDM
Jul 9, 2026
Updated: cvssEstimate, tags
Jul 9, 2026
Patch Available
Jul 11, 2026

Version History

v2
Last enriched 47d ago
v2Tier C47d ago

Updated severity to HIGH, added CVSS estimate of 7.5, and corrected exploit availability status.

cvssEstimatetags
via VulDB
v147d ago

Initial creation