Status: NEW | Advisory ID: CVE-2026-1078
| CVE | CVE-2026-1078 |
| CVSS Score / Version | 7.2 (High) / CVSS v4.0 |
| Updated | 2026-06-17 |
| Classified as | CWE-284 (Improper Access Control) |
An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users who are running automations that work with Google Chrome or Microsoft Edge. A bad actor could create a website that includes malicious code. The vulnerability could occur if a Robot Runtime user navigates to the malicious website. (NVD)
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-1078 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-1078 |