CVE-2026-0290
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser enables a local attacker to view sensitive data.
Risk Assessment
A local attacker can access sensitive data, potentially leading to privacy and security breaches for users.
Recommendation
Update Prisma Browser to the latest patched version and restrict local access to devices.
Other vulnerabilities in Palo Alto Networks Prisma Browser
See all- CVE-2026-0289Medium
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser enables a user to bypass intended security controls.
- CVE-2026-0236High
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface, allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
- CVE-2026-0237High
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
Original NVD description (English source)
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS