Security Bypass in Palo Alto Networks Prisma® Browser Account Protection Feature
CVE-2026-0289

0.5LOW

Key Information:

Vendor

Palo Alto Networks
Status
Prisma Browser
Vendor
CVE Published:
13 August 2026

Badges

👾 Exploit Exists

What is CVE-2026-0289?

A vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser allows users to circumvent established security controls, potentially exposing sensitive information and compromising secure access. This flaw poses risks to users who rely on the platform for safe browsing and account management.

Affected Version(s)

Prisma Browser 0 < 150.49.4.125

References

https://security.paloaltonetworks.com/CVE-2026-0289
vendor-advisory

CVSS V4

Score:
0.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Palo Alto Networks thanks Thomas Villanueva for discovering and reporting this issue.
.