CVE-2026-0306

5.8 mediumEPSS 0.2%

Medium (5.8). EPSS 0.2% chance of exploitation in the next 30 days.

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

Severity

CVSS 4.0

5.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-693
Published: 2026-09-10
Modified: 2026-09-10
Record from: the NVD, synced 2026-10-19

References

https://security.paloaltonetworks.com/CVE-2026-0306

Check your stack JSON