Question
Nationwide Building Society
GB
Last activity: 22 Jan 2026 8:16 EST
CAD-D992: NATWBS - A26: Pega RPA – Pega Browser Extension (PBE) Vulnerability as pertaining to citrix servers
Does the vulnerability as stated in CAD-D992 released 21 Jan also apply to PBE's which are installed on citrix servers?
We are taking immediate measures to package the 22.1.53 runtime with the new 3.1.45 PBE to mitigate the security issue
We also have a citrix server farm which currently hosts the 22.1.53 runtime which has the 3.1.40 PBE
We will be upgrading the entire farm with the new 3.1.45 PBE so this new issue will be mitigated in due course
However we need to complete an immediate risk assessment on the current citrix server pega software configuration
Because citrix is a more secure environment we want to understand whether this new security vulnerability applies also to PBE's installed on citrix
Thank you
Rich Bien