CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. It affects Windows, Linux, Android and other products.
CVE
CVE-2026-0248
Severity
MEDIUM
CVSS
5.9
EPSS
0.19%
Windows Linux Android Chrome
Original NVD Description
An improper certificate validation vulnerability in the Prisma Access Agent® for Android and Chrome OS enables an attacker to perform a man-in-the-middle (MitM) attack to intercept VPN traffic. By presenting a certificate for any domain issued by a trusted Certificate Authority, the attacker can capture sensitive device information. The Prisma Access Agent on macOS, Windows, Linux and iOS are not affected.
Related CVEs
Other vulnerabilities affecting the same vendor(s)