CVE-2026-0236 HIGH

CVE-2026-0236: Prisma Browser: Code Injection Enables Security Controls Bypass

Vendor Palo Alto Networks

Product Prisma Browser

Weakness CWE-94 · Code injection

Published May 13, 2026

Last update May 15, 2026

View on NVD All CVEs

CVSS base score

7.3/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

What the vulnerability does

01Description

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

Key dates

02Disclosure timeline

May 13, 2026 CVE published

May 15, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-0236 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2024-58284 PopojiCMS 2.0.1 Remote Command Execution via Authenticated Metadata Settings CVE-2024-1015 Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 CVE-2021-21433 Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation CVE-2026-44006 vm2: Sandbox Escape CVE-2025-1119 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.5 - Unauthenticated Arbitrary Shortcode Execution