CVE-2026-4761 (GCVE-0-2026-4761)

Vulnerability from cvelistv5 – Published: 2026-03-25 12:45 – Updated: 2026-03-26 08:58
VLAI?
Title
Unnecessary permissions on private keys of certificates installed by Network and Security Wizard
Summary
When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group. * Installations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed * Installations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable Please refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt.
Severity ?
3.3 (Low)
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/U:Amber
CWE
  • CWE-732 - Incorrect Permission Assignment for Critical Resource
Assigner
References
Impacted products
Vendor Product Version
CODRA Panorama Suite Affected: Panorama Suite 2025 , < update PS-2500-00-0357 (custom)
Unaffected: Panorama Suite 2025 Updated Dec. 25
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4761",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-25T13:06:35.347666Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-25T13:06:43.166Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "Network and Security Tool"
          ],
          "platforms": [
            "Windows"
          ],
          "product": "Panorama Suite",
          "vendor": "CODRA",
          "versions": [
            {
              "lessThan": "update PS-2500-00-0357",
              "status": "affected",
              "version": "Panorama Suite 2025",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "Panorama Suite 2025 Updated Dec. 25"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:codra:panorama_suite:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "update_ps-2500-00-0357",
                  "versionStartIncluding": "panorama_suite_2025",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:codra:panorama_suite:panorama_suite_2025_updated_dec._25:*:windows:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group.\u003cbr\u003e\u003cul\u003e\u003cli\u003eInstallations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed\u003c/li\u003e\u003cli\u003eInstallations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable\u003c/li\u003e\u003c/ul\u003ePlease refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt."
            }
          ],
          "value": "When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group.\n  *  Installations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed\n  *  Installations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable\n\n\nPlease refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-1",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "CWE-732: Incorrect Permission Assignment for Critical Resource",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-26T08:58:02.831Z",
        "orgId": "30aa36b7-a224-4bc9-b7d3-abea20aa4887",
        "shortName": "CODRA"
      },
      "references": [
        {
          "url": "https://my.codra.net/api/csirt/download?resourceId=1469\u0026fileType=FichierPDF"
        }
      ],
      "source": {
        "advisory": "Pano/BS-036",
        "discovery": "INTERNAL"
      },
      "title": "Unnecessary permissions on private keys of certificates installed by Network and Security Wizard",
      "x_generator": {
        "engine": "Vulnogram 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "30aa36b7-a224-4bc9-b7d3-abea20aa4887",
    "assignerShortName": "CODRA",
    "cveId": "CVE-2026-4761",
    "datePublished": "2026-03-25T12:45:27.361Z",
    "dateReserved": "2026-03-24T09:12:20.014Z",
    "dateUpdated": "2026-03-26T08:58:02.831Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-4761",
      "date": "2026-04-20",
      "epss": "0.00018",
      "percentile": "0.0463"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-4761\",\"sourceIdentifier\":\"30aa36b7-a224-4bc9-b7d3-abea20aa4887\",\"published\":\"2026-03-25T13:16:28.310\",\"lastModified\":\"2026-04-01T15:32:41.053\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group.\\n  *  Installations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed\\n  *  Installations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable\\n\\n\\nPlease refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt.\"},{\"lang\":\"es\",\"value\":\"Cuando se instala un certificado y su clave privada en el almac\u00e9n de certificados de la m\u00e1quina Windows utilizando la herramienta de Red y Seguridad, se conceden innecesariamente derechos de acceso a la clave privada al grupo de operadores.\\n\\n*   Las instalaciones basadas en Panorama Suite 2025 (25.00.004) son vulnerables a menos que se instale la actualizaci\u00f3n PS-2500-00-0357 (o superior).\\n*   Las instalaciones basadas en Panorama Suite 2025 Actualizado 25 Dic. (25.10.007) no son vulnerables.\\n\\nConsulte el bolet\u00edn de seguridad BS-036, disponible en el sitio web del CSIRT de Panorama: https://my.codra.net/en-gb/csirt.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"30aa36b7-a224-4bc9-b7d3-abea20aa4887\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber\",\"baseScore\":3.3,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"UNREPORTED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"AMBER\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"30aa36b7-a224-4bc9-b7d3-abea20aa4887\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-732\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codra:panorama_collaborative_operation_\\\\\u0026_execution:25.00.004:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2E17453-9392-40F1-94B9-B43725C91AE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codra:panorama_com:25.00.004:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E7ADB78-2574-4CE8-A39C-A67F6DCE4EED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codra:panorama_e2:25.00.004:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B992EF9-A765-45DB-AD47-16300D7F3B80\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codra:panorama_h2:25.00.004:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B268371-5F90-40DB-9D6D-BCCB781CDC08\"}]}]}],\"references\":[{\"url\":\"https://my.codra.net/api/csirt/download?resourceId=1469\u0026fileType=FichierPDF\",\"source\":\"30aa36b7-a224-4bc9-b7d3-abea20aa4887\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-4761\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-25T13:06:35.347666Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-25T13:06:38.567Z\"}}], \"cna\": {\"title\": \"Unnecessary permissions on private keys of certificates installed by Network and Security Wizard\", \"source\": {\"advisory\": \"Pano/BS-036\", \"discovery\": \"INTERNAL\"}, \"impacts\": [{\"capecId\": \"CAPEC-1\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 3.3, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"LOCAL\", \"baseSeverity\": \"LOW\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/U:Amber\", \"exploitMaturity\": \"UNREPORTED\", \"providerUrgency\": \"AMBER\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"CODRA\", \"modules\": [\"Network and Security Tool\"], \"product\": \"Panorama Suite\", \"versions\": [{\"status\": \"affected\", \"version\": \"Panorama Suite 2025\", \"lessThan\": \"update PS-2500-00-0357\", \"versionType\": \"custom\"}, {\"status\": \"unaffected\", \"version\": \"Panorama Suite 2025 Updated Dec. 25\"}], \"platforms\": [\"Windows\"], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://my.codra.net/api/csirt/download?resourceId=1469\u0026fileType=FichierPDF\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group.\\n  *  Installations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed\\n  *  Installations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable\\n\\n\\nPlease refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group.\u003cbr\u003e\u003cul\u003e\u003cli\u003eInstallations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed\u003c/li\u003e\u003cli\u003eInstallations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable\u003c/li\u003e\u003c/ul\u003ePlease refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-732\", \"description\": \"CWE-732: Incorrect Permission Assignment for Critical Resource\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:codra:panorama_suite:*:*:windows:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"update_ps-2500-00-0357\", \"versionStartIncluding\": \"panorama_suite_2025\"}, {\"criteria\": \"cpe:2.3:a:codra:panorama_suite:panorama_suite_2025_updated_dec._25:*:windows:*:*:*:*:*\", \"vulnerable\": false}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"30aa36b7-a224-4bc9-b7d3-abea20aa4887\", \"shortName\": \"CODRA\", \"dateUpdated\": \"2026-03-26T08:58:02.831Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-4761\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-26T08:58:02.831Z\", \"dateReserved\": \"2026-03-24T09:12:20.014Z\", \"assignerOrgId\": \"30aa36b7-a224-4bc9-b7d3-abea20aa4887\", \"datePublished\": \"2026-03-25T12:45:27.361Z\", \"assignerShortName\": \"CODRA\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.