CVE-2026-0290
Received Received - Intake

Information Disclosure in Palo Alto Networks Prisma Browser

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Palo Alto Networks, Inc.

Description
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-0290
EUVD
EUVD-2026-57704

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
palo_alto_networks prisma_browser to 148.18.4.217 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-522 The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a low-severity information disclosure vulnerability in Palo Alto Networks Prisma Browser. It affects the Account Protection feature, allowing a local attacker to view sensitive data when the feature is enabled. The issue impacts versions before 148.18.4.217.

Detection Guidance

Check if the Account Protection feature is enabled in Prisma Browser by verifying the 'Activate account protection' checkbox in Login Controls settings.

Impact Analysis

A local attacker could exploit this to view sensitive data if the Account Protection feature is enabled. However, Palo Alto Networks has not observed any malicious exploitation. Users should upgrade to version 148.18.4.217 or later to mitigate the risk.

Compliance Impact

This vulnerability may impact compliance with GDPR or HIPAA if sensitive data exposed through the information disclosure is subject to those regulations. However, the provided context does not specify the types of sensitive data involved or regulatory implications.

Mitigation Strategies

Upgrade Prisma Browser to version 148.18.4.217 or later to address the vulnerability. No known workarounds exist.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0290. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart