CVE-2026-1078: Pegasystems Pega Robot Studio

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge. A bad actor could create a website that includes malicious code. The vulnerability could occur if a Robot Runtime user navigates to the malicious website.

Affected products

• Pegasystems Pega Robot Studio: version 22.1 only; version R25 only

Published 2026-04-07. Last modified 2026-06-17.