CVE-2026-0233Disclosure(microsoft / autonomous_digital_experience_manager)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • autonomous_digital_experience_manager
  • windows

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Discloure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-04-13)
  • 3 total mentions across 2 days

Affected systems

Products
autonomous_digital_experience_managerwindows

1 version affected across 2 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-08: 1Mentions · 2026-04-13: 2Technical Details · 2026-04-08: 1Technical Details · 2026-04-13: 204-0804-13
Signal classification2 categories
Disclosure
266.7%
Discloure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-081
Disclosure1
2026-04-132
Disclosure1Discloure1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-0233 A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network a… https://www.cve.org/CVERecord?id=CVE-2026-0233

    Post summary

    The text cites CVE-2026-0233 as a certificate validation flaw in Palo Alto Networks' Autonomous Digital Experience Manager, noting it permits unauthenticated attackers on adjacent networks to exploit the system.

    00010120
    57.1K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Discloure

    CVE-2026-0233 Certificate Validation Vulnerability in Palo Alto Networks ADEM on Windows Allows SYSTEM RCE https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0233

    Post summary

    The post announces CVE-2026-0233, a certificate validation flaw in Palo Alto Networks ADEM that permits SYSTEM‑level RCE, but provides no exploitation or patch details.

    0000052
    4.0K followersView on X
  • まっちゃだいふく@ripjyr
    Disclosure

    Paloaltoの脆弱性情報 「CVE-2026-0233 Autonomous Digital Experience Manager: Improper validation of ADEM certificate (Severity: MEDIUM)」が公開されました。 → https://security.paloaltonetworks.com/CVE-2026-0233

    Post summary

    An advisory was published for CVE-2026-0233, noting improper validation of an ADEM certificate in Palo Alto’s Autonomous Digital Experience Manager.

    00000315
    8.6K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows---
Apppaloaltonetworksautonomous_digital_experience_manager---

Explore more