BaseFortify

Publication date: 2026-05-13

Last updated on: 2026-05-14

Assigner: Palo Alto Networks, Inc.

Description

Multiple authorization bypass vulnerabilities in the Endpoint DLP component of Prisma Access Agent® allow a local attacker to bypass authentication controls and execute privileged operations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-13

Last Modified

2026-05-14

Generated

2026-06-30

EPSS Evaluated

2026-06-28

NVD

CVE-2026-0247

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2026-0247. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70