Read the docs

CODRA

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

CODRA records in CISA KEV

No CODRA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Panorama Collaborative Operation & Execution 1 record LOW Panorama Com 1 record LOW Panorama E2 1 record LOW Panorama H2 1 record LOW

Records

2 records

TI-2026-04154 CVE-2026-4760 · GHSA-46v5-gpch-77vw

Potential unauthorized access to files on the Web HMI server host

Priority MEDIUM 40

From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are accessible to the Servin process execution account.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00326 Published 2026-03-25 Fixed in update PS-2210-02-4079, update PS-2300-03-3078 AND PS-2300-04-3078 AND PS-2300-82-3078 +2 CWE-552
TI-2026-04155 CVE-2026-4761 · GHSA-f22h-wfgq-73hp

Unnecessary permissions on private keys of certificates installed by Network and Security Wizard

Priority LOW 15

When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group.

CVSS 4.0LOW 3.3 Local Low privileges No interaction EPSS 0.00124 Published 2026-03-25 Fixed in update PS-2500-00-0357, Panorama Suite 2025 Updated Dec. 25 CWE-732
Open these records in search →