CVE-2026-0289
Received Received - Intake

Account Protection Security Bypass in Prisma Browser

Vulnerability report for CVE-2026-0289, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Palo Alto Networks, Inc.

Description

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
palo_alto_networks prisma_browser From 2026-08-01 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-0289 is a security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser. It allows a user to bypass intended security controls, potentially undermining the intended protections of the feature.

Detection Guidance

The provided CVE details do not include specific detection methods or commands for CVE-2026-0289. Palo Alto Networks' advisory mentions applying security updates to address Chromium-related vulnerabilities but does not outline detection procedures.

Impact Analysis

This vulnerability could allow an attacker to bypass security controls, potentially gaining unauthorized access to sensitive data or performing actions not permitted by the intended security policies. The impact depends on the specific security controls in place and the attacker's goals.

Compliance Impact

The provided CVE data does not specify how CVE-2026-0289 impacts compliance with standards like GDPR or HIPAA. The vulnerability involves a security bypass in Prisma Browser's Account Protection feature, but no details are given about data exposure or regulatory implications.

Mitigation Strategies

Apply the August 2026 security update from Palo Alto Networks to address Chromium vulnerabilities, including CVE-2026-0289. The update fixes over 200 CVEs with HIGH severity ratings. Promptly install the update to mitigate potential exploits.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0289. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart