PT-2026-40710 · Unknown · Prisma Browser

Cisors · Published 2026-05-13 · Updated 2026-05-13 · CVE-2026-0237

Positive Technologies (AI Summary)

CVSS v4.0

7.3

High

Base vector

AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions Prisma Browser on macOS (affected versions not specified)

Description An improper protection of alternate path issue exists where access to an internal automation bridge is not properly restricted. This allows a locally authenticated non-admin user to use an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-424

Related Identifiers

BDU:2026-07032

CVE-2026-0237

Affected Products

Prisma Browser

References · 4

• https://security.paloaltonetworks.com/CVE-2026-0237 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0237 · Security Note
• https://bdu.fstec.ru/vul/2026-07032 · Security Note
• https://security.paloaltonetworks.com/PAN-SA-2026-0007 · Note