CVE-2026-0289
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser enables a user to bypass intended security controls.
Risk Assessment
A user can bypass security controls, potentially leading to violation of security policies and potentially unauthorized actions.
Recommendation
Update Prisma Browser to the patched version and review security configurations.
Other vulnerabilities in Palo Alto Networks Prisma Browser
See all- CVE-2026-0290Medium
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser enables a local attacker to view sensitive data.
- CVE-2026-0236High
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface, allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
- CVE-2026-0237High
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
Original NVD description (English source)
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS