CVE-2026-0233

HIGH 8.8CVE-2026-0233 · Published 13/04/2026 · updated 26/10/2026

In short

CVE-2026-0233 is a HIGH (CVSS 8.8) vulnerability affecting autonomous digital experience manager (paloaltonetworks).
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 7.0% of all vulnerabilities.
Fix: update to 5.10.14 or later.

Package	Affected versions	Patched versions
autonomous digital experience manager paloaltonetworks	`≥ 5.10.0, < 5.10.14`	`5.10.14`

Description

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

References

security.paloaltonetworks.com/CVE-2026-0233 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free