PatchTheCVECVE-2026-0290: An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Brows
CVE-2026-0290 is a medium-severity flaw (CVSS 5.5) affecting prisma browser. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.1% (top 98%) |
| CISA exploited list | No |
| Weakness | CWE-522 |
| Published | 2026-08-13 |
| Last modified | 2026-10-23 |
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-0290?
prisma browser: upgrade to 148.18.4.217. Exact commands for each OS are on this page.
Is CVE-2026-0290 being exploited?
CVE-2026-0290 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-0290 affect?
CVE-2026-0290 affects prisma browser. Severity is medium (CVSS 5.5). An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.
How urgent is CVE-2026-0290?
Priority 20/100. No elevated risk signals yet.
Related CVEs
- CVE-2026-0289 MEDIUM 6.5 UPGRADE A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enabl