CVE-2026-0248 — Prisma Access Agent: Improper Certificate Validation Vulnerability

CVE-2026-0248

Prisma Access Agent: Improper Certificate Validation Vulnerability PUBLISHED

Description (CNA)

An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Prisma Access Agent	affected 0 before 26.2.1
Palo Alto Networks / Prisma Access Agent	unaffected All

CWE

CWE-295

References

https://security.paloaltonetworks.com/CVE-2026-0248

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.