Security Advisory

CVE-2026-1079

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-07 15:17:47

Last updated 2026-04-07 20:06:55

Assigner Pega

State PUBLISHED

Description

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad actor could create a website that contains malicious code that targets PBE. The vulnerability could occur if a user navigates to this website. The malicious website could then present an unexpected message box.

← Browse all CVEs View on cve.org ↗