CVE-2026-0233CWE-295

Autonomous Digital Experience Manager: Improper validation of ADEM certificate

Low · published April 13, 2026

CVSS v4.0
2.0
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Green
EPSS
0.00175 · 6.6th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2026-04-13T07:17Z
EPSS history
Timeline
  • 13 APR 07:17Z
    Autonomous Digital Experience Manager: Improper validation of ADEM certificate
    cvelistv5