VULNERABILITY INTELLIGENCE

CVE-2026-0228

EPSS probability0.20%
CISA KEVNot currently listed
Published2026-02-11
Last modified2026-06-17

Description

An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-295

Primary references