A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://security.paloaltonetworks.com/CVE-2026-0233 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 2.0 · paloaltonetworksNVD modified 2026-10-26 22:10
Affected (CPE criteria) 1
cpe:2.3:a:paloaltonetworks:autonomous_digital_experience_manager:*:*:*:*:*:*:*:*
References 1
- https://security.paloaltonetworks.com/CVE-2026-0233 Vendor Advisory