CVE-2026-1079

CVE-2026-1079 is a native messaging host vulnerability in Pega Browser Extension (PBE) that affects all versions of Pega Robotic Automation users who have installed the extension. An attacker could exploit this vulnerability by hosting malicious code on a website that, when visited by a user, triggers an unexpected message box through the compromised extension. The vulnerability requires user interaction in the form of website navigation, making it dependent on social engineering or user-directed visits to malicious sites. The FAUCET Risk Score of 43.0/100 indicates moderate risk, and exploitation activity appears minimal with an EPSS score of 0.00054, suggesting this vulnerability is not actively exploited in the wild. No exploit code is publicly available, and the vulnerability has not achieved significant community attention, as evidenced by its absence from the Known Exploited Vulnerabilities catalog and inactive status on security hotlists.