CVE-2026-0289

Analyzed Analyzed - Analysis Complete

Account Protection Security Bypass in Prisma Browser

Publication date: 2026-08-13

Last updated on: 2026-09-09

Assigner: Palo Alto Networks, Inc.

Description

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-09-09

Generated

2026-09-22

AI Q&A

2026-08-13

EPSS Evaluated

2026-09-21

NVD

CVE-2026-0289

EUVD

EUVD-2026-57703

Affected Vendors & Products

Vendor	Product	Version / Range
paloaltonetworks	prisma_browser	to 150.49.4.125 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

CVE-2026-0289 is a security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser. It allows a user to bypass intended security controls, potentially undermining the intended protections of the feature.

Detection Guidance

The provided CVE details do not include specific detection methods or commands for CVE-2026-0289. Palo Alto Networks' advisory mentions applying security updates to address Chromium-related vulnerabilities but does not outline detection procedures.

Impact Analysis

This vulnerability could allow an attacker to bypass security controls, potentially gaining unauthorized access to sensitive data or performing actions not permitted by the intended security policies. The impact depends on the specific security controls in place and the attacker's goals.

Compliance Impact

The provided CVE data does not specify how CVE-2026-0289 impacts compliance with standards like GDPR or HIPAA. The vulnerability involves a security bypass in Prisma Browser's Account Protection feature, but no details are given about data exposure or regulatory implications.

Mitigation Strategies

Apply the August 2026 security update from Palo Alto Networks to address Chromium vulnerabilities, including CVE-2026-0289. The update fixes over 200 CVEs with HIGH severity ratings. Promptly install the update to mitigate potential exploits.

Hi! I’m here to help you understand CVE-2026-0289. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70