InfoSecBulletin Cybersecurity for mankind
Palo Alto Networks shared its security bulletin revealing 11 new issues that impact PAN-OS, the GlobalProtect App, Prisma Access Agent, and Prisma Browser. There is also a monthly update for Chromium.
The patch batch covers flaws with information leaks, getting extra system rights, buffer overflow, skipping certificate checks, and bypassing security measures.
MITRE ATT&CK v20 Unveils 9 New Attack Techniques On AI Exploits, MFA Bypass, and CAPTCHA Evasion
Hackers Exploit Fortinet Flaws to Deploy Stealthy PEERSTITCH Malware on FortiGate Firewalls
Hacker stole Meta GitHub repos; Stole Source Code
Urgent patch! Zoom,NVIDIA and IBM Patch 41 Security flaws
Microsoft patches record braking 1411 flaws; 2 zero days
Anthropic unveils “OSS Scanner” Free AI Vulnerability Scanner for Open-Source Projects
Rise on RCE Exploits Targeting Hikvision Camera Flaw
FortiBleed Attack Compromised 80,000+ Devices, SonicWall Patches 4 SMA1000 Flaws CVSS 10
Critical Atlassian & IBM Flaws Expose Files and Enable Remote Code Execution
Citrix NetScaler SAML 0-Day Flaw Under Attack
Severity scores go from a low 1.1 to a moderate 7.2 on the CVSS scale. This means that none of the new issues are very serious in this release. Security teams watching PAN-OS weaknesses should check endpoint risks in all company areas.
Palo Alto Networks Patches 11 New Flaws
The main infrastructure issue, CVE-2026-0301, is a low-risk (CVSS 1.7) flaw that lets information leak in PAN-OS URL Filtering. It affects Cloud NGFW and several PAN-OS versions like 12.1, 11.2, 11.1, and 10.2, as well as Prisma Access set up on AWS and Azure.
Fixes are ready for the affected PAN-OS 11.1 and 10.2 versions, and Palo Alto Networks has already fixed the Cloud NGFW and public-cloud Prisma Access systems. Organizations should check the release tables in the Palo Alto Networks Security Advisories. This will help them make sure all firewall management interfaces are updated.
The GlobalProtect App had the most fixes this month, with six different CVEs reported:
CVE-2026-0299 (CVSS 5.9): Addresses multiple local privilege escalation flaws across GlobalProtect 6.3, 6.2, and 6.0 on Linux, macOS, and Windows; mobile builds (iOS, Android, Chrome OS) remain unaffected.
CVE-2026-0298 (CVSS 5.2): Resolves a code execution vulnerability specific to the Windows Pre-Logon Access Provider (PLAP) component.
CVE-2026-0297 (CVSS 5.2): Fixes a buffer overflow triggered during the UDP tunnel handshake process, impacting iOS, Android, and Chrome OS versions prior to 6.3.5.
CVE-2026-0296 (CVSS 4.5): Mitigates an improper certificate validation bypass affecting desktop clients.
CVE-2026-0295 (CVSS 4.1): Fixes a race condition leading to local privilege escalation on macOS endpoints.
Patches for some GlobalProtect app flaws on version 6.0 are expected to be ready by August 31, 2026, showing that work is still being done for older clients.
| CVE Identifier | Component / Product | CVSS Score | Vulnerability Type & Scope | Patch Status / ETA |
| CVE-2026-0301 | PAN-OS URL Filtering / Prisma Access | 1.7 | Information Disclosure | Patched / Cloud Remediated |
| CVE-2026-0299 | GlobalProtect App (Desktop) | 5.9 | Local Privilege Escalation | Patched (Branch 6.0 ETA Aug 31) |
| CVE-2026-0298 | GlobalProtect Windows PLAP | 5.2 | Local Code Execution | Patched |
| CVE-2026-0297 | GlobalProtect App (Mobile/Desktop) | 5.2 | UDP Handshake Buffer Overflow | Fixed in 6.3.5+ |
| CVE-2026-0294 | Prisma Access Agent (Win/macOS) | 6.0 | Local Privilege Escalation | Pending (ETA Aug 20, 2026) |
| CVE-2026-0293 | Prisma Access Agent (Windows) | 5.6 | Anti-Tamper Protection Bypass | Pending (ETA Aug 20, 2026) |
| PAN-SA-2026-0011 | Prisma Browser (< 148.18.4.217) | 7.2 | Chromium Rollup Vulnerabilities | Fixed in 150.49.8.187+ |
Prisma Access Agent was subject to four separate security disclosures:
CVE-2026-0294 (CVSS 6.0): A local privilege escalation vulnerability affecting Windows and macOS with a fix ETA of August 20.
CVE-2026-0293 (CVSS 5.6): An anti-tamper protection bypass on Windows with an August 20 fix ETA.
CVE-2026-0292 (CVSS 2.1): A local security inspection bypass on Windows sharing the August 20 timeline.
CVE-2026-0291 (CVSS 1.1): An authenticated file deletion flaw on Linux, already patched in version 26.2.2.
Palo Alto Networks released alert PAN-SA-2026-0011 about issues in Chromium for Prisma Browser versions before 148.18.4.217. It has a CVSS score of 7.2, which is the highest risk in the August update.
Organizations using Prisma Browser should prioritize updating to version 150.49.8.187 or later.
Administrators should focus on updating the PAN-OS management interfaces and URL filtering rules that are exposed to the internet. Next, they should update desktop VPN clients on Windows and macOS, where there are issues with privilege escalation.
