AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Palo Alto NetworksCVE-2026-0289

Palo Alto Networks Prisma Browser: weakly protected credentials

Palo Alto Networks

CVE-2026-0289 · Published Aug 13, 2026 · updated Sep 9, 2026

Low0.5
Fix: upgrade to 150.49.4.125 or later
Palo Alto Networks advisory

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.

Affected versions

PackageAffectedFixed in
Prisma Browser
Product
< 150.49.4.125150.49.4.125
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-522

More Palo Alto Networks advisories

All Palo Alto Networks
Low 1.7Aug 13Palo Alto Networks Cloud NGFW: information disclosureCVE-2026-0301fixed in 11.1.16-h1 +2Medium 5.2Aug 13Palo Alto Networks GlobalProtect App: buffer overflowCVE-2026-0297fixed in 6.3.3-h15 +4Medium 5.2Aug 13Palo Alto Networks GlobalProtect App: improper input validationCVE-2026-0298fixed in 6.3.3-h14 +2Medium 5.9Aug 13Palo Alto Networks GlobalProtect App: privilege escalationCVE-2026-0299fixed in 6.3.3-h15 +3Medium 5.6Aug 13Palo Alto Networks Prisma: local attacker could bypass the anti-tamper...CVE-2026-0293fixed in 26.3Medium 6.0Aug 13Palo Alto Networks Prisma Access Agent: privilege escalationCVE-2026-0294fixed in 26.3