Is CVE-2026-0233 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-0233 being exploited in the wild.

How severe is CVE-2026-0233?

High severity, with a CVSS score of 8.8, published 13 April 2026.

Which products and versions are affected?

Palo Alto Networks Autonomous Digital Experience Manager (ADEM) 5.10.0 to 5.10.13 on Windows.

Is there a fix for CVE-2026-0233?

A patch was published on 2026-04-08: Version 5.10.14 released to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-0233 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-0233?

Check whether you run Microsoft Windows, Palo Alto Networks Autonomous Digital Experience Manager (ADEM) or Paloaltonetworks Autonomous Digital Experience Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-0233: Palo Alto Networks ADEM improper certificate validation on Windows

CVE-2026-0233 · Severity: high · CVSS 8.8 · Published 2026-04-13

A security vulnerability exists in Palo Alto Networks Autonomous Digital Experience Manager (ADEM) for Windows, a tool used to monitor and optimize network performance for end-users. An attacker on the same local network could exploit a flaw in how the software verifies security certificates to take full control of the affected computer. This could lead to the theft of sensitive data, installation of malicious software, or complete disruption of the device's operations.

Technologies: Microsoft Windows. Vendors: Microsoft, Palo Alto Networks, Paloaltonetworks.

Quick answers

Is CVE-2026-0233 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-0233 being exploited in the wild.
How severe is CVE-2026-0233?: High severity, with a CVSS score of 8.8, published 13 April 2026.
Which products and versions are affected?: Palo Alto Networks Autonomous Digital Experience Manager (ADEM) 5.10.0 to 5.10.13 on Windows.
Is there a fix for CVE-2026-0233?: A patch was published on 2026-04-08: Version 5.10.14 released to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-0233 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-0233?: Check whether you run Microsoft Windows, Palo Alto Networks Autonomous Digital Experience Manager (ADEM) or Paloaltonetworks Autonomous Digital Experience Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A certificate validation vulnerability (CWE-295) exists in Palo Alto Networks Autonomous Digital Experience Manager (ADEM) for Windows versions 5.10.0 through 5.10.13. The root cause is improper validation of the ADEM certificate, which can be exploited by an unauthenticated attacker with adjacent network access (e.g., on the same local network or subnet). By spoofing a trusted entity or intercepting communications, an attacker can achieve remote code execution with NT AUTHORITY\SYSTEM privileges. The vulnerability is addressed in version 5.10.14.

Affected products

Palo Alto Networks Autonomous Digital Experience Manager (ADEM) 5.10.0 to 5.10.13 on Windows

Timeline

2026-04-08: disclosed: Initial publication by Palo Alto Networks
2026-04-08: patched: Version 5.10.14 released to address the issue
2026-04-13: advisory: NVD publication date

References

https://security.paloaltonetworks.com/CVE-2026-0233

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.