CVE-2026-0228 — Improper Certificate Validation in Palo Alto Networks Pan-os

CWE-295 — Improper Certificate Validation4 documents4 sources
Severity
1.3LOWNVD
EPSS
0.0%
top 98.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Palo Alto Networks Pan-osPalo Alto Networks Prisma AccessPaloalto Cloud Ngfw+2 more
Timeline
PublishedFeb 11

Description

An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N

Affected Packages5 packages

▶CVEListV5palo_alto_networks/pan-os11.2.0 — 11.2.8+2
▶CVEListV5palo_alto_networks/prisma_access10.2.0 — 10.2.10-h28
▶Palo Altopaloalto/pan-os

🔴Vulnerability Details

2
GHSA
GHSA-j8fr-767f-7h52: An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certifica↗2026-02-11
▶
CVEList
PAN-OS: Improper Validation of Terminal Server Agent Certificate↗2026-02-11
▶

📋Vendor Advisories

1
Palo Alto
PAN-OS: Improper Validation of Terminal Server Agent Certificate↗
▶
CVE-2026-0228 — Improper Certificate Validation in Palo | cvebase