Palo Alto Networks has released its August 12, 2026 security bulletin, disclosing 11 new vulnerabilities affecting PAN-OS, the GlobalProtect App, Prisma Access Agent, and Prisma Browser, along with a monthly Chromium update rollup.
The patch batch spans information disclosure, local privilege escalation, buffer overflow, certificate validation bypass, and anti-tamper bypass flaws.
Severity scores range from a low 1.1 to a moderate 7.2 on the CVSS scale, meaning none of the newly published issues reach critical severity in this release cycle.
Security teams monitoring PAN-OS vulnerabilities should evaluate endpoint exposures across enterprise environments.
Palo Alto Networks Patches 11 New Vulnerabilities
The most notable infrastructure entry, CVE-2026-0301, is a low-severity (CVSS 1.7) information disclosure vulnerability in PAN-OS URL Filtering. It impacts Cloud NGFW and multiple PAN-OS release branches, including 12.1, 11.2, 11.1, and 10.2, as well as Prisma Access deployments hosted on AWS and Azure.
Fixes are available across the affected PAN-OS 11.1 and 10.2 releases, and Cloud NGFW and public-cloud Prisma Access instances have already been remediated by Palo Alto Networks.
As detailed in the official Palo Alto Networks Security Advisories, organizations should review specific release tables to ensure all firewall management interfaces are updated.
Following broader Palo Alto security news helps enterprise administrators stay informed about system updates.
The GlobalProtect App received the highest concentration of fixes this month, with six distinct CVEs disclosed:
CVE-2026-0299 (CVSS 5.9): Addresses multiple local privilege escalation flaws across GlobalProtect 6.3, 6.2, and 6.0 on Linux, macOS, and Windows; mobile builds (iOS, Android, Chrome OS) remain unaffected.
CVE-2026-0298 (CVSS 5.2): Resolves a code execution vulnerability specific to the Windows Pre-Logon Access Provider (PLAP) component.
CVE-2026-0297 (CVSS 5.2): Fixes a buffer overflow triggered during the UDP tunnel handshake process, impacting iOS, Android, and Chrome OS versions prior to 6.3.5.
CVE-2026-0296 (CVSS 4.5): Mitigates an improper certificate validation bypass affecting desktop clients.
CVE-2026-0295 (CVSS 4.1): Fixes a race condition leading to local privilege escalation on macOS endpoints.
Patches for several GlobalProtect app flaws on the 6.0 branch carry an estimated availability date of August 31, 2026, indicating remediation efforts remain ongoing for legacy clients.
CVE IdentifierComponent / ProductCVSS ScoreVulnerability Type & ScopePatch Status / ETACVE-2026-0301PAN-OS URL Filtering / Prisma Access1.7Information DisclosurePatched / Cloud RemediatedCVE-2026-0299GlobalProtect App (Desktop)5.9Local Privilege EscalationPatched (Branch 6.0 ETA Aug 31)CVE-2026-0298GlobalProtect Windows PLAP5.2Local Code ExecutionPatchedCVE-2026-0297GlobalProtect App (Mobile/Desktop)5.2UDP Handshake Buffer OverflowFixed in 6.3.5+CVE-2026-0294Prisma Access Agent (Win/macOS)6.0Local Privilege EscalationPending (ETA Aug 20, 2026)CVE-2026-0293Prisma Access Agent (Windows)5.6Anti-Tamper Protection BypassPending (ETA Aug 20, 2026)PAN-SA-2026-0011Prisma Browser (< 148.18.4.217)7.2Chromium Rollup VulnerabilitiesFixed in 150.49.8.187+
Prisma Access Agent was subject to four separate security disclosures:
CVE-2026-0294 (CVSS 6.0): A local privilege escalation vulnerability affecting Windows and macOS with a fix ETA of August 20.
CVE-2026-0293 (CVSS 5.6): An anti-tamper protection bypass on Windows with an August 20 fix ETA.
CVE-2026-0292 (CVSS 2.1): A local security inspection bypass on Windows sharing the August 20 timeline.
CVE-2026-0291 (CVSS 1.1): An authenticated file deletion flaw on Linux, already patched in version 26.2.2.
Separately, Palo Alto Networks issued advisory PAN-SA-2026-0011, addressing Chromium vulnerabilities in Prisma Browser builds prior to 148.18.4.217. With a CVSS score of 7.2, this is the highest risk score in the August update cycle.
Organizations using Prisma Browser should prioritize updating to version 150.49.8.187 or later.
While none of the flaws disclosed in this cycle are currently flagged as actively exploited, the volume of GlobalProtect and Prisma Access Agent fixes underscores endpoint exposure.
Administrators should prioritize updating internet-facing PAN-OS management interfaces and URL filtering policies, followed by desktop VPN clients on Windows and macOS, where privilege escalation vulnerabilities intersect.
[Live Webinar] Join Elastic & UnderDefense to learn how small security teams can unify AI visibility and agentic response into one operating model -> Register Now
The post Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access appeared first on Cyber Security News.
