race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user t…

CISA Known Exploited Vulnerability

Listed:

Apr 1, 2026 · federal remediation due Apr 15, 2026

Required action:

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware use:

Unknown

KEV is a prioritization signal from CISA — remediation detail still comes from the vendor advisory.