CVE-2026-4761lowCWE-732

CVE-2026-4761: falha de baixa gravidade em CODRA Panorama Suite

Unnecessary permissions on private keys of certificates installed by Network and Security Wizard

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Panorama Suite

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.3epss 0.1%
When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group. * Installations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed * Installations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable Please refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt.
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/U:Amber
Produtos afetados
CODRA · Panorama Suite
CVEs relacionadas — CODRA Panorama Suite

No mesmo produto, das mais perigosas para as menos.

CVE-2026-4760HIGHPotential unauthorized access to files on the Web HMI server hostEPSS 0.3%