Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access

Palo Alto Networks has issued its August 12, 2026 security bulletin, announcing the discovery of 11 new vulnerabilities impacting PAN-OS, GlobalProtect App, Prisma Access Agent, and Prisma Browser, as well as a monthly Chromium update rollup This article explores patched cve 2026. .

CVE-2026-0297 (Buffer Overflow Fix) Addresses Issues During UDP Handshake Process, Impacting iOS, Android, and Chrome OS Versions Prior to 6.3.5 CVE-2026-0296 (Certificate Validation Bypass Mitigation) Prevents Improper Certificate Validation Bypass on Desktop Clients CVE-2026-0295 (Race Condition Fix) Ensures Local Privilege Escalation Is Avoided On macOS Endpoints Patches for Several GlobalProtect App Flaws on the 6.0 Branch Have An Estimated Availability Date of August 31, 2026, Indicating Ongoing Remediation Efforts For Legacy Clients CVE Identifier Component / Product CVSS Score Vulnerability Type & Scope Patch Status / ETA CVE-2026-0301 PAN-OS URL Filtering / Prisma Access 1.7 Information Disclosure Patched / Cloud Remediated CVE-2026-0299 GlobalProtect App (Desktop) 5.9 Local Privilege Escalation Patched (Branch 6.0 ETA Aug 31) CVE-2026-0298 GlobalProtect Windows PLAP 5.2 Local Code Execution Patched CVE-2026-0297 GlobalProtect App (Mobile/Desktop) 5.2 UDP Handshake Buffer Overflow Fixed in 6.3.5+ CVE-2026-0294 Prisma Access Agent (Win/macOS) 6.0 Local Privilege Escalation Pending (ETA Aug 20, 2026) CVE-2026-0293 Prisma Access Agent (Windows) 5.6 Anti-Tamper Protection Bypass Pending (ETA Aug 20, 2026) Patches for Several GlobalProtect App Flaws on the 6.0 Branch Have An Estimated Availability Date of August 31, 2026, Indicating Ongoing Remediation Efforts For Legacy Clients CVE Identifier Component / Product CVSS Score Vulnerability Type & Scope Patch Status / ETA CVE-2026-0301 PAN-OS URL Filtering / Prisma Access 1.7 Information Disclosure Patched / Cloud Remediated CVE-2026-0299 GlobalProtect App (Desktop) 5.9 Local Privilege Escalation Patched (Branch 6.0 ETA Aug 31) CVE-2026-0298 GlobalProtect Windows PLAP 5.2 Local Code Execution Patched CVE-2026-0297 GlobalProtect App (Mobile/Desktop) 5.2 UDP Handshake Buffer Overflow Fixed in 6.3.5+ CVE-2026-0294 Prisma Access Agent (Win/macOS) 6.0 Local Privilege Escalation Pending (ETA Aug 20, 2026) CVE-2026-0293 Prisma Access Agent (Windows) 5.6 Anti-Tamper Protection Bypass Pending (ETA Aug 20, 2026) Patches for...