What is CVE-2026-4761?

CVE-2026-4761 is a high-severity vulnerability in Codra Panorama Collaborative Operation \& Execution, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.5/10. Published 2026-03-25.

How severe is CVE-2026-4761?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Codra Panorama Collaborative Operation \& Execution

CVE-2026-4761

When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily granted to the operator group. * Installations based on Panorama Suite 2025 (25.00.004) are vulnerable unless update PS-2500-00-0357 (or higher) is installed * Installations based on Panorama Suite 2025 Updated Dec. 25 (25.10.007) are not vulnerable Please refer to security bulletin BS-036, available on the Panorama CSIRT website: https://my.codra.net/en-gb/csirt.

EPSS: 0.001 (2.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Codra Panorama_collaborative_operation_\&_execution — versions 25.00.004
Codra Panorama_com — versions 25.00.004
Codra Panorama_e2 — versions 25.00.004
Codra Panorama_h2 — versions 25.00.004
Codra Panorama Suite — versions Panorama Suite 2025, Panorama Suite 2025 Updated Dec. 25

Weakness classification (CWE)

CWE-732 — Incorrect Permission Assignment for Critical Resource

References

30aa36b7-a224-4bc9-b7d3-abea20aa4887 (Vendor Advisory)

Frequently asked questions

What is CVE-2026-4761?: CVE-2026-4761 is a high-severity vulnerability in Codra Panorama Collaborative Operation \& Execution, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.5/10. Published 2026-03-25.
How severe is CVE-2026-4761?: High severity. CVSS v3 base score is 7.5 out of 10.