Is CVE-2026-4761 actively exploited?

No active exploitation of CVE-2026-4761 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-4761 be exploited remotely?

No. CVE-2026-4761 requires local access to exploit.

What is the CVSS score of CVE-2026-4761?

CVE-2026-4761 has a CVSS score of 3.3 (LOW).

HOME VULNERABILITIESCVE-2026-4761

LOW

CVE-2026-4761

CWE-732Published: March 25, 2026· Updated: Mar 26, 2026

3.3

CVSS v3.1

Official Description

When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group.

* Installations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed

* Installations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable

Please refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt.

NVD Source

Technical Analysis

CVE-2026-4761 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.Low

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber