Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-1079

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Pega

Description

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad actor could create a website that contains malicious code that targets PBE. The vulnerability could occur if a user navigates to this website. The malicious website could then present an unexpected message box.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pegasystems Pega Browser Extension (PBE)

Default version status: unaffected

  • 0 to < 3.1.45affected

References