Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.0

Palo Alto Networks Autonomous Digital Experience Manager certificate validation weakness on Windows

CVE-2026-0233 · published 6 months ago
Summary

An attacker on the same local network can execute malicious code with administrator-level access to your Windows system if they exploit this weakness. This happens because the software doesn't properly validate digital certificates. Update the software to the latest version to fix this issue.

What to do
  • Update paloaltonetworks autonomous_digital_experience_manager to version 5.10.14 or later.
Affected software
VendorProductAffected versions
paloaltonetworks autonomous_digital_experience_manager >= 5.10.0, < 5.10.14
cpe:2.3:a:paloaltonetworks:autonomous_digital_experience_manager:*:*:*:*:*:*:*:*
Original advisory text
A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary co...
A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
2.0 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-295Improper Certificate Validation
Timeline
Published13 Apr 2026
Updated26 Oct 2026
First seen13 Apr 2026
Sources
CVE-2026-0233 · NVD
Track software like this
Free during beta