CVE-2026-0236

UNKNOWN View on NVD ↗

Description

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

References

https://security.paloaltonetworks.com/CVE-2026-0236

Published: May 13, 2026 19:16 UTC Modified: May 14, 2026 16:21 UTC