Vulnerability · Published May 13, 2026 · Assigned by palo_alto
CVE-2026-0236Prisma Browser: Code Injection Enables Security Controls Bypass
High 7.3
In plain English
A high-severity code injection in Prisma Browser from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 4.0)7.3High
Exploit odds (30 days)0.2%top 95.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | Prisma Browser | 0 – before 146.16.6.165 |
Weakness: CWE-94 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber
References
- https://security.paloaltonetworks.com/CVE-2026-0236 vendor-advisory