VULNERABILITY INTELLIGENCE

CVE-2026-0233

CVSS score8.8 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-04-13
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-295

Primary references