Product:
PAN-OS
Summary
An improper certificate validation vulnerability in PAN-OS allows users to connect Terminal Server Agents on Windows to PAN-OS using expired certificates even if the PAN-OS configuration would not normally permit them to do so. This could lead to unauthorized access and potential security risks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 1.3 | CVE-2026-0228 |
Exploitation
To exploit this vulnerability, an attacker can leverage the improper certificate validation to connect Terminal Server Agents on Windows to PAN-OS using expired certificates. This can be done without the usual restrictions imposed by the PAN-OS configuration, allowing unauthorized access to the system.
Affected Products
- PAN-OS: Vulnerable to improper certificate validation, allowing connections with expired certificates.
Mitigation
To mitigate this vulnerability, it is recommended to ensure that only valid certificates are used for connections to PAN-OS. Regularly updating and validating certificates can help prevent unauthorized access and maintain the integrity of the system.