CVE-2026-0306

A vulnerability in the EndPoint Data Loss Prevention (DLP) enforcement of Palo Alto Networks Prisma® Access Agent enables a local user to bypass configured DLP policy enforcement controls and exfiltrate sensitive data. This Prisma Access Agent on macOS, Linux, iOS, Android and Chrome OS is not affected.

  • Published Sep 10, 2026
  • CVSS 5.8 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-0306 at the National Vulnerability Database