← Back

CVE-2026-0233

nvd nist
Published: Apr 13, 2026Modified: Jul 7, 2026

JSON object

Loading...
2.0
Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Green
Show more
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:GreenShow less
Source: psirt@paloaltonetworks.com (Secondary)

Description

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

Affected (1)

Paloaltonetworks
1 product
Autonomous Digital Experience Manager
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Autonomous Digital Experience Manager
From 5.10.0 to 5.10.14
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (1)

Source: psirt@paloaltonetworks.com
Vendor Advisory

Timeline

No history available yet.