Skip to content
OpenAdvisories
Low · 2.0 CVE-2026-0233 EUVD-2026-21898GHSA-2cp9-2r3x-xx3f

Autonomous Digital Experience Manager: Improper validation of ADEM certificate

Published Apr 13, 2026 · Updated Apr 14, 2026 · Assigned by palo_alto

Description

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

Affected products

VendorProductAffectedFixed
Palo Alto Networks Autonomous Digital Experience Manager 5.10.0 – < 5.10.14 5.10.14

References