AnswersPublished16 sources
Palo Alto Networks August 2026 Security Bulletin: 11 CVEs in GlobalProtect and Prisma Access
On August 12, 2026, Palo Alto Networks disclosed 11 vulnerabilities across PAN OS, GlobalProtect App, Prisma Access Agent, and Prisma Browser, with no active exploitation reported. CVE 2026 0299 is the most impactful: a local privilege escalation in GlobalProtect App (CVSS B 8.5) that lets a non admin user gain SYST...
Research answer
Key takeaways
- On August 12, 2026, Palo Alto Networks disclosed 11 vulnerabilities across PAN OS, GlobalProtect App, Prisma Access Agent, and Prisma Browser, with no active exploitation reported.
- CVE 2026 0299 is the most impactful: a local privilege escalation in GlobalProtect App (CVSS B 8.5) that lets a non admin user gain SYSTEM/root access on Windows, macOS, and Linux.
- Patches are available now for most Windows and macOS versions, with Linux fixes expected by August 28–31.
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: What vulnerabilities did Palo Alto Networks disclose in its GlobalProtect VPN client and Prisma Access Agent on August 12, including details. Article summary: On August 12, 2026, Palo Alto Networks published its monthly security bulletin disclosing **11 vulnerabilities** across PAN-OS, GlobalProtect App, Prisma Access Agent, and Prisma Browser [8][10]. The GlobalProtect App re. Topic tags: general, government, general web, user generated. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, ch
On August 12, 2026, Palo Alto Networks published its monthly security bulletin disclosing 11 vulnerabilities across PAN-OS, GlobalProtect App, Prisma Access Agent, and Prisma Browser . The GlobalProtect App received fixes for two CVEs (CVE-2026-0298 and CVE-2026-0299), while the Prisma Access Agent received fixes for four CVEs (CVE-2026-0291, CVE-2026-0292, CVE-2026-0293, CVE-2026-0294)
. No active exploitation has been reported
. Severity scores across the bulletin range from 1.1 to 7.2 on the CVSS scale, with none reaching critical severity
. Administrators should prioritize patching immediately, as the vendor states no workarounds exist for the most severe flaws
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "Palo Alto Networks August 2026 Security Bulletin: 11 CVEs in GlobalProtect and Prisma Access"?
On August 12, 2026, Palo Alto Networks disclosed 11 vulnerabilities across PAN OS, GlobalProtect App, Prisma Access Agent, and Prisma Browser, with no active exploitation reported.
What are the key points to validate first?
On August 12, 2026, Palo Alto Networks disclosed 11 vulnerabilities across PAN OS, GlobalProtect App, Prisma Access Agent, and Prisma Browser, with no active exploitation reported. CVE 2026 0299 is the most impactful: a local privilege escalation in GlobalProtect App (CVSS B 8.5) that lets a non admin user gain SYSTEM/root access on Windows, macOS, and Linux.
What should I do next in practice?
Patches are available now for most Windows and macOS versions, with Linux fixes expected by August 28–31.
Sources
- cybersecuritynews.comVulnerability News Archives - Cyber Security News
- cybersecuritynews.comPalo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access
- feedly.comLatest Paloaltonetworks Vulnerabilities
- gbhackers.comPalo Alto GlobalProtect Vulnerabilities Enable SYSTEM and Root-Level Access
- security.paloaltonetworks.comCVE-2026-0299 GlobalProtect App: Local Privilege ...
- technoid.grFixing 11 critical security vulnerabilities in PAN-OS