CVE-2026-0233: Autonomous Digital Experience Manager: Improper validation of ADEM certificate (Severity: MEDIUM)
Published Apr 8, 2026
·Updated
A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.
Affected Software
4 affected componentsFixes available
All of the following
Palo Alto Networks Autonomous Digital Experience Manager<5.10.14, =5.10.0
5.10.14
Microsoft Windows*
All of the following
Palo Alto Networks Autonomous Digital Experience Manager>=5.10.0<5.10.14
Microsoft Windows
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.10.14 - Upgrade
Upgrade
Palo Alto Networks Autonomous Digital Experience Manager (Windows)to a version that resolves this vulnerability.Fixed in 5.10.14
Event History
Apr 8, 2026
Advisory Published
via Palo Alto Networks·04:00 PM
Data Sourced
via Palo Alto Networks·04:00 PM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
via Palo Alto Networks·06:05 PM
Apr 13, 2026
CVE Published
via MITRE·07:17 AM
Data Sourced
via MITRE·07:17 AM
DescriptionWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeaknessAffected Software