Critical cybersecurity update: Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access. NetworkFix reviewed the available source material to summarize the security issue, its potential impact and the defensive actions administrators should prioritize.
What Happened
Palo Alto Networks has released its August 12, 2026 security bulletin, disclosing 11 new vulnerabilities affecting PAN-OS, the GlobalProtect App, Prisma Access Agent, and Prisma Browser, along with a monthly Chromium update rollup. The patch batch spans information disclosure, local privilege escalation, buffer overflow, certificate validation bypass, and anti-tamper bypass flaws. Severity scores range from […] The post Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access appeared first on Cyber Security News . Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access Palo Alto Networks has released its August 12, 2026 security bulletin, disclosing 11 new vulnerabilities affecting PAN-OS, the GlobalProtect App, Prisma Access Agent, and Prisma Browser, along with a monthly Chromium update rollup. Severity scores range from a low 1.1 to a moderate 7.2 on the CVSS scale, meaning none of the newly published issues reach critical severity in this release cycle. Security teams monitoring PAN-OS vulnerabilities should evaluate endpoint exposures across enterprise environments. The most notable infrastructure entry, CVE-2026-0301, is a low-severity (CVSS 1.7) information disclosure vulnerability in PAN-OS URL Filtering. It impacts Cloud NGFW and multiple PAN-OS release branches, including 12.1, 11.2, 11.1, and 10.2, as well as Prisma Access deployments hosted on AWS and Azure.
Technical Details
Fixes are available across the affected PAN-OS 11.1 and 10.2 releases, and Cloud NGFW and public-cloud Prisma Access instances have already been remediated by Palo Alto Networks. As detailed in the official Palo Alto Networks Security Advisories , organizations should review specific release tables to ensure all firewall management interfaces are updated. Following broader Palo Alto security news helps enterprise administrators stay informed about system updates. The GlobalProtect App received the highest concentration of fixes this month, with six distinct CVEs disclosed: CVE-2026-0299 (CVSS 5.9): Addresses multiple local privilege escalation flaws across GlobalProtect 6.3, 6.2, and 6.0 on Linux, macOS, and Windows; mobile builds (iOS, Android, Chrome OS) remain unaffected. CVE-2026-0298 (CVSS 5.2): Resolves a code execution vulnerability specific to the Windows Pre-Logon Access Provider (PLAP) component. CVE-2026-0297 (CVSS 5.2): Fixes a buffer overflow triggered during the UDP tunnel handshake process, impacting iOS, Android, and Chrome OS versions prior to 6.3.5. CVE-2026-0296 (CVSS 4.5): Mitigates an improper certificate validation bypass affecting desktop clients. CVE-2026-0295 (CVSS 4.1): Fixes a race condition leading to local privilege escalation on macOS endpoints. Patches for several GlobalProtect app flaws on the 6.0 branch carry an estimated availability date of August 31, 2026, indicating remediation efforts remain ongoing for legacy clients.
Security Impact
Organizations using the affected technology should treat the report according to its critical severity classification. CVE Identifier Component / Product CVSS Score Vulnerability Type & Scope Patch Status / ETA CVE-2026-0301 PAN-OS URL Filtering / Prisma Access 1.7 Information Disclosure Patched / Cloud Remediated CVE-2026-0299 GlobalProtect App (Desktop) 5.9 Local Privilege Escalation Patched (Branch 6.0 ETA Aug 31) CVE-2026-0298 GlobalProtect Windows PLAP 5.2 Local Code Execution Patched CVE-2026-0297 GlobalProtect App (Mobile/Desktop) 5.2 UDP Handshake Buffer Overflow Fixed in 6.3.5+ CVE-2026-0294 Prisma Access Agent (Win/macOS) 6.0 Local Privilege Escalation Pending (ETA Aug 20, 2026) CVE-2026-0293 Prisma Access Agent (Windows) 5.6 Anti-Tamper Protection Bypass Pending (ETA Aug 20, 2026) PAN-SA-2026-0011 Prisma Browser ( Register Now Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments. Top 10 Malware Threats of the Week – AsyncRAT, Remcos, and Xworm Lead the Surge Three PhaaS Kits Targeting US Organizations to Steal M65 Logins by Bypassing MFA How Top SOCs Detect and Stop AI Phishing that Beats Email Gateways Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026) An SOC Story of Why Fast Answers Beat Perfect Answers in Cyber Incident Response New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide Mindgard Raises $30 Million to Tackle AI’s Fastest-Growing Attack Surface China-linked Hackers Using AI Agents to Attack Taiwan Government Websites Critical Adobe ColdFusion Vulnerabilities Allow Attackers to Execute Arbitrary Code WhatsApp Unveils New Scam Alert Feature to Protect Users from Social Engineering Attacks From Reactive Forensics to Predictive Defence: Strengthening Cyber Resilience in Banking Beyond the Lure: What the DoNot Campaign Reveals About Modern Cyber Espionage Your Incident Response Plan Has a Dependency You Never Approved Security in the AI Era Starts with First Principles Planning Your AI Security – How will You Manage All Your Resources? Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis. Global malware activity climbed sharply over the past week,… Ransomware Gangs Attack Palo Alto, Fortinet, Citrix, and Check Point VPNs to Target Corporate Networks A coordinated wave of exploitation targeting edge VPN and… How Infostealer Logs Became the Fuel Behind Massive Cloud Data Breaches Infostealer malware has quietly become the single most important…
Recommended Actions
- Identify whether the affected product, service or software is present in the environment.
- Review the original vendor or research advisory and verify affected versions before making configuration changes.
- Apply vendor-provided security updates or mitigations as soon as operationally practical.
- Review relevant security logs and monitoring alerts for signs of suspicious activity associated with the reported issue.
- Use the CVE identifiers, where available, to validate exposure through vulnerability-management and asset-inventory tools.
Security Details
- Severity: Critical
- Original source: Cybersecurity News
Why This Matters
Cybersecurity teams should use reports like this as an input to risk-based vulnerability and threat management rather than relying on headline severity alone. Exposure depends on whether the affected technology is deployed, reachable by an attacker and protected by compensating controls. Confirming asset ownership, affected versions and available vendor fixes helps teams prioritize remediation while avoiding unnecessary emergency changes.
Original Report
NetworkFix recommends reviewing the complete original report from Cybersecurity News for the authoritative technical context, affected versions, indicators and vendor-specific remediation details: Read the original report.
