Security vulnerabilities in Prisma Access

The GCVE catalog currently lists 115 vulnerability records affecting Prisma Access.

Among the 18 records analyzed by CyStack, 5 are High or Critical and 1 appear in the CISA KEV catalog.

Prisma Access is Palo Alto Networks’ cloud-delivered SASE platform that secures remote workers and branch locations by converging secure networking and security services in the cloud. It provides managed, global security infrastructure to extend Palo Alto Networks’ protections to mobile users and remote networks without building a private global network. It is marketed as part of a broader Prisma SASE portfolio and is deployed as a turnkey, cloud-hosted service with continuous updates managed by Palo Alto Networks.

1. Inventory all Prisma Access tenants and gateways; 2. Enable centralized logging via Cortex Data Lake and ensure logs are retained per policy; 3. Regularly review access policies, enforce least privilege, and apply updates promptly; 4. Monitor for anomalous egress and enforce egress controls at the cloud edge; 5. Schedule periodic configuration reviews during change windows and maintain an incident response runbook.