CVE-2026-0235: Palo Alto Networks Prisma Browser

Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days.

A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.

Affected products

• Palo Alto Networks Prisma Browser: before 146.10.7.154 (fixed in 146.10.7.154)

Published 2026-05-13. Last modified 2026-07-14.