PT-2026-40772 · Palo Alto Networks · Prisma Access Agent For Android+1

CVE-2026-0248 · Published 2026-05-13 · Updated 2026-05-13

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Prisma Access Agent for Android (affected versions not specified) Prisma Access Agent for Chrome OS (affected versions not specified)

Description Improper certificate validation allows an attacker to conduct a man-in-the-middle (MitM) attack—a technique where an attacker secretly relays and possibly alters the communications between two parties—to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, an attacker can capture sensitive device information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

CWE-205

Related Identifiers

BDU:2026-07178

CVE-2026-0248

Affected Products

Prisma Access Agent For Android

Prisma Access Agent For Chrome Os

References · 4

• https://bdu.fstec.ru/vul/2026-07178 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-0248 · Security Note
• https://security.paloaltonetworks.com/CVE-2026-0248 · Vendor Advisory
• https://twitter.com/CVEnew/status/2054709253752119346 · Twitter Post