InfoSecBulletin Cybersecurity for mankind
Palo Alto Networks shared its security bulletin revealing 11 new issues that impact PAN-OS, the GlobalProtect App, Prisma Access Agent, and Prisma Browser. There is also a monthly update for Chromium.
The patch batch covers flaws with information leaks, getting extra system rights, buffer overflow, skipping certificate checks, and bypassing security measures.
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
Anthropic prepares “Claude Money” to analyze bank account and financial data
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
VPN flaw exposed 246,000 personnel records in japan
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Severity scores go from a low 1.1 to a moderate 7.2 on the CVSS scale. This means that none of the new issues are very serious in this release. Security teams watching PAN-OS weaknesses should check endpoint risks in all company areas.
Palo Alto Networks Patches 11 New Flaws
The main infrastructure issue, CVE-2026-0301, is a low-risk (CVSS 1.7) flaw that lets information leak in PAN-OS URL Filtering. It affects Cloud NGFW and several PAN-OS versions like 12.1, 11.2, 11.1, and 10.2, as well as Prisma Access set up on AWS and Azure.
Fixes are ready for the affected PAN-OS 11.1 and 10.2 versions, and Palo Alto Networks has already fixed the Cloud NGFW and public-cloud Prisma Access systems. Organizations should check the release tables in the Palo Alto Networks Security Advisories. This will help them make sure all firewall management interfaces are updated.
The GlobalProtect App had the most fixes this month, with six different CVEs reported:
CVE-2026-0299 (CVSS 5.9): Addresses multiple local privilege escalation flaws across GlobalProtect 6.3, 6.2, and 6.0 on Linux, macOS, and Windows; mobile builds (iOS, Android, Chrome OS) remain unaffected.
CVE-2026-0298 (CVSS 5.2): Resolves a code execution vulnerability specific to the Windows Pre-Logon Access Provider (PLAP) component.
CVE-2026-0297 (CVSS 5.2): Fixes a buffer overflow triggered during the UDP tunnel handshake process, impacting iOS, Android, and Chrome OS versions prior to 6.3.5.
CVE-2026-0296 (CVSS 4.5): Mitigates an improper certificate validation bypass affecting desktop clients.
CVE-2026-0295 (CVSS 4.1): Fixes a race condition leading to local privilege escalation on macOS endpoints.
Patches for some GlobalProtect app flaws on version 6.0 are expected to be ready by August 31, 2026, showing that work is still being done for older clients.
| CVE Identifier | Component / Product | CVSS Score | Vulnerability Type & Scope | Patch Status / ETA |
| CVE-2026-0301 | PAN-OS URL Filtering / Prisma Access | 1.7 | Information Disclosure | Patched / Cloud Remediated |
| CVE-2026-0299 | GlobalProtect App (Desktop) | 5.9 | Local Privilege Escalation | Patched (Branch 6.0 ETA Aug 31) |
| CVE-2026-0298 | GlobalProtect Windows PLAP | 5.2 | Local Code Execution | Patched |
| CVE-2026-0297 | GlobalProtect App (Mobile/Desktop) | 5.2 | UDP Handshake Buffer Overflow | Fixed in 6.3.5+ |
| CVE-2026-0294 | Prisma Access Agent (Win/macOS) | 6.0 | Local Privilege Escalation | Pending (ETA Aug 20, 2026) |
| CVE-2026-0293 | Prisma Access Agent (Windows) | 5.6 | Anti-Tamper Protection Bypass | Pending (ETA Aug 20, 2026) |
| PAN-SA-2026-0011 | Prisma Browser (< 148.18.4.217) | 7.2 | Chromium Rollup Vulnerabilities | Fixed in 150.49.8.187+ |
Prisma Access Agent was subject to four separate security disclosures:
CVE-2026-0294 (CVSS 6.0): A local privilege escalation vulnerability affecting Windows and macOS with a fix ETA of August 20.
CVE-2026-0293 (CVSS 5.6): An anti-tamper protection bypass on Windows with an August 20 fix ETA.
CVE-2026-0292 (CVSS 2.1): A local security inspection bypass on Windows sharing the August 20 timeline.
CVE-2026-0291 (CVSS 1.1): An authenticated file deletion flaw on Linux, already patched in version 26.2.2.
Palo Alto Networks released alert PAN-SA-2026-0011 about issues in Chromium for Prisma Browser versions before 148.18.4.217. It has a CVSS score of 7.2, which is the highest risk in the August update.
Organizations using Prisma Browser should prioritize updating to version 150.49.8.187 or later.
Administrators should focus on updating the PAN-OS management interfaces and URL filtering rules that are exposed to the internet. Next, they should update desktop VPN clients on Windows and macOS, where there are issues with privilege escalation.
