Pega Browser Extension vulnerabilities
3 known CVE vulnerabilities in Pega Browser Extension, translated and rated.
- CVE-2026-0898Critical
An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robot Studio developers automating Google Chrome and Microsoft Edge in versions 22.1 or R25. It does not affect Robot Runtime users. An attacker could create a malicious website, and the vulnerability may be exploited if a developer is tricked into visiting it during interrogation mode in Robot Studio.
- CVE-2026-1079Medium
A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed PBE. A malicious website could contain code targeting PBE and present an unexpected message box if a user navigates to it.
- CVE-2026-1078High
An arbitrary file-write vulnerability in Pega Browser Extension (PBE) affects Pega Robotic Automation version 22.1 or R25 users running automations with Google Chrome or Microsoft Edge. A malicious website could exploit this if a Robot Runtime user navigates to it.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS