Palo Alto Networks Security Advisories - August 2026

Affected Environment
PAN-OS, Cloud NGFW, Prisma Access, GlobalProtect App, Prisma Access Agent, and Prisma Browser deployments.

Threat Overview
Multiple advisories cover information disclosure, privilege escalation, buffer overflow, code execution, and certificate bypass issues.

Exposure Timeline
Published 13 August 2026; highest published severity is CVSS 7.2 with no critical rated flaws.

Attack Surface
URL filtering component, GlobalProtect client on Windows, macOS and Linux, and Prisma Access Agent drivers.

Technical Root Cause
Local privilege escalation, buffer overflow during UDP tunnel handshake, and anti tamper protection bypass weaknesses.

Exploitation Pathway
Local authenticated attacker escalates privileges, or MitM attacker disrupts UDP tunnel handshake for code execution.