Beveiligingsadvies

CVE-2026-1079

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-07 15:17:47
Laatst bijgewerkt 2026-04-07 20:06:55
Toegewezen door Pega
CVSS-score 6.0
Status PUBLISHED

Beschrijving

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad actor could create a website that contains malicious code that targets PBE. The vulnerability could occur if a user navigates to this website. The malicious website could then present an unexpected message box.