CVE-2026-0228CWE-295

PAN-OS: Improper Validation of Terminal Server Agent Certificate

Low · published February 11, 2026

CVSS v4.0
1.3
EPSS
0%
Percentile
10.0
In the wild
Unconfirmed
What it is

An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so.

The record
Technical detail
CVSS v4.0
1.3 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00205 · 10.0th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2026-02-11T17:55Z
EPSS history
Timeline
  • 11 FEB 17:55Z
    PAN-OS: Improper Validation of Terminal Server Agent Certificate
    cvelistv5