CVE-2026-1079

A native messaging host vulnerability in Pega Browser Extension (PBE) affects users of all versions of Pega Robotic Automation who have installed Pega Browser Extension. A bad actor could create a website that contains malicious code that targets PBE. The vulnerability could occur if a user navigates to this website. The malicious website could then present an unexpected message box.

• CWE-284

• https://support.pega.com/support-doc/pega-security-advisory-a26-vulnerability-remediation-note

Published

Apr 7, 2026

Last Modified

Jun 17, 2026

Status

Awaiting Analysis

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10780The Static Block plugin for WordPress is vulnerable to Insec…4.3
• CVE-2026-10782The RealHomes Memberships plugin for WordPress is vulnerable…4.3
• CVE-2026-10783A security flaw has been discovered in gradio-app gradio 6.1…2.5
• CVE-2026-10786Improper access control in the ticketing integration setting…6.5
• CVE-2026-10787Missing authorization in the deleted user groups API in Devo…4.3
• CVE-2026-10789A maliciously crafted webpage, when visited by a user with A…9.6
• CVE-2026-10795The UpdraftPlus: WP Backup & Migration Plugin plugin for Wor…8.1
• CVE-2026-10796nvm (Node Version Manager) through 0.40.4 executes arbitrary…7.5
• CVE-2026-1080GitLab has remediated an issue in GitLab EE affecting all ve…4.3
• CVE-2026-10800A weakness has been identified in PaddlePaddle FastDeploy up…3.6
• CVE-2026-10801A security vulnerability has been detected in modelscope ms-…3.6
• CVE-2026-10802A vulnerability was detected in keystonejs keystone up to 20…4.3