Dashboard / CVE-2026-0233

CVE-2026-0233

LOW
INFO Priority: 0.00 BB Relevance: 39/100
Published: 2026-04-13 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Physical
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: High
VI: High
VA: High

Description

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
paloaltonetworks autonomous_digital_experience_manager 5.10.0 – 5.10.14

References & Advisories (1)

Bug Bounty Relevance

39 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

2.0 / 10.0 v4.0
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Green

EPSS — Exploitation Probability

0.18%
Raw Score 0.001750
Percentile 7.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00175
2026-10-28
0.00175

Intelligence Sources

nvd ref →

External Links