CVE-2026-0228

PAN-OS: Improper Validation of Terminal Server Agent Certificate

State: Published
Severity: 1.3 Low
Published: Feb 11, 2026
Updated: Feb 11, 2026
Reserved: Nov 3, 2025

Description

An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so.

Scores

CVSS	Score	Vector	Source
4.0	1.3 Low	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber	palo_alto

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
Cloud NGFWPalo Alto Networks	AllNot affected
PAN-OSPalo Alto Networks	12.1.0 to before 11.2.8Not affectedfrom 11.2.8Not affected 11.2.0 to before 11.2.8Affectedfrom 11.2.8Not affected 11.1.0 to before 11.1.11Affectedfrom 11.1.11Not affected 10.2.0 to before 10.2.17Affectedfrom 10.2.17Not affected
Prisma AccessPalo Alto Networks	10.2.0 to before 10.2.10-h28Affectedfrom 11.2.7-h10Not affectedfrom 10.2.10-h28Not affected

References

https://security.paloaltonetworks.com/CVE-2026-0228vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.