VULNERABILITY INTELLIGENCE
CVE-2026-0235
CVSS score4.7 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-05-13
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.
Weakness classification
- psirt@paloaltonetworks.com: CWE-754
- nvd@nist.gov: CWE-362
Primary references
- psirt@paloaltonetworks.com — Vendor Advisory