CVE-2026-0288
EUVD-2026-4238808.07.2026, 21:16
Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic. The security risk posed by this issue is minimized when the User-ID Terminal Server Agent connectivity is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://docs.paloaltonetworks.com/ngfw/help/10-2/user-identification/device-user-identification-terminal-services-agents#:~:text=To%20minimize%20security%20risk%2C%20restrict%20TS%20Agent%20connectivity%20to%20trusted%20internal%20IP%20addresses%20only. . Panorama is not impacted by this vulnerability.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| paloaltonetworks | pan-os | 10.2.0 ≤ 𝑥 < 10.2.7 |
| paloaltonetworks | pan-os | 10.2.8 ≤ 𝑥 < 10.2.10 |
| paloaltonetworks | pan-os | 10.2.11 ≤ 𝑥 < 10.2.13 |
| paloaltonetworks | pan-os | 10.2.14 ≤ 𝑥 < 10.2.16 |
| paloaltonetworks | pan-os | 10.2.7 |
| paloaltonetworks | pan-os | 10.2.7:h1 |
| paloaltonetworks | pan-os | 10.2.7:h10 |
| paloaltonetworks | pan-os | 10.2.7:h11 |
| paloaltonetworks | pan-os | 10.2.7:h12 |
| paloaltonetworks | pan-os | 10.2.7:h13 |
| paloaltonetworks | pan-os | 10.2.7:h14 |
| paloaltonetworks | pan-os | 10.2.7:h15 |
| paloaltonetworks | pan-os | 10.2.7:h16 |
| paloaltonetworks | pan-os | 10.2.7:h17 |
| paloaltonetworks | pan-os | 10.2.7:h18 |
| paloaltonetworks | pan-os | 10.2.7:h19 |
| paloaltonetworks | pan-os | 10.2.7:h2 |
| paloaltonetworks | pan-os | 10.2.7:h20 |
| paloaltonetworks | pan-os | 10.2.7:h21 |
| paloaltonetworks | pan-os | 10.2.7:h22 |
| paloaltonetworks | pan-os | 10.2.7:h23 |
| paloaltonetworks | pan-os | 10.2.7:h24 |
| paloaltonetworks | pan-os | 10.2.7:h3 |
| paloaltonetworks | pan-os | 10.2.7:h32 |
| paloaltonetworks | pan-os | 10.2.7:h34 |
| paloaltonetworks | pan-os | 10.2.7:h35 |
| paloaltonetworks | pan-os | 10.2.7:h4 |
| paloaltonetworks | pan-os | 10.2.7:h5 |
| paloaltonetworks | pan-os | 10.2.7:h6 |
| paloaltonetworks | pan-os | 10.2.7:h7 |
| paloaltonetworks | pan-os | 10.2.7:h8 |
| paloaltonetworks | pan-os | 10.2.7:h9 |
| paloaltonetworks | pan-os | 10.2.10 |
| paloaltonetworks | pan-os | 10.2.10:h1 |
| paloaltonetworks | pan-os | 10.2.10:h10 |
| paloaltonetworks | pan-os | 10.2.10:h11 |
| paloaltonetworks | pan-os | 10.2.10:h12 |
| paloaltonetworks | pan-os | 10.2.10:h13 |
| paloaltonetworks | pan-os | 10.2.10:h14 |
| paloaltonetworks | pan-os | 10.2.10:h17 |
| paloaltonetworks | pan-os | 10.2.10:h18 |
| paloaltonetworks | pan-os | 10.2.10:h2 |
| paloaltonetworks | pan-os | 10.2.10:h21 |
| paloaltonetworks | pan-os | 10.2.10:h27 |
| paloaltonetworks | pan-os | 10.2.10:h3 |
| paloaltonetworks | pan-os | 10.2.10:h30 |
| paloaltonetworks | pan-os | 10.2.10:h31 |
| paloaltonetworks | pan-os | 10.2.10:h36 |
| paloaltonetworks | pan-os | 10.2.10:h37 |
| paloaltonetworks | pan-os | 10.2.10:h4 |
| paloaltonetworks | pan-os | 10.2.10:h5 |
| paloaltonetworks | pan-os | 10.2.10:h6 |
| paloaltonetworks | pan-os | 10.2.10:h7 |
| paloaltonetworks | pan-os | 10.2.13 |
| paloaltonetworks | pan-os | 10.2.13:h1 |
| paloaltonetworks | pan-os | 10.2.13:h10 |
| paloaltonetworks | pan-os | 10.2.13:h15 |
| paloaltonetworks | pan-os | 10.2.13:h16 |
| paloaltonetworks | pan-os | 10.2.13:h18 |
| paloaltonetworks | pan-os | 10.2.13:h2 |
| paloaltonetworks | pan-os | 10.2.13:h21 |
| paloaltonetworks | pan-os | 10.2.13:h22 |
| paloaltonetworks | pan-os | 10.2.13:h3 |
| paloaltonetworks | pan-os | 10.2.13:h4 |
| paloaltonetworks | pan-os | 10.2.13:h5 |
| paloaltonetworks | pan-os | 10.2.13:h7 |
| paloaltonetworks | pan-os | 10.2.16 |
| paloaltonetworks | pan-os | 10.2.16:h1 |
| paloaltonetworks | pan-os | 10.2.16:h4 |
| paloaltonetworks | pan-os | 10.2.16:h6 |
| paloaltonetworks | pan-os | 10.2.16:h7 |
| paloaltonetworks | pan-os | 10.2.16:h8 |
| paloaltonetworks | pan-os | 10.2.17 |
| paloaltonetworks | pan-os | 10.2.18:h1 |
| paloaltonetworks | pan-os | 10.2.18:h5 |
| paloaltonetworks | pan-os | 10.2.18:h6 |
| paloaltonetworks | pan-os | 10.2.18:h7 |
| paloaltonetworks | pan-os | 11.1.0 ≤ 𝑥 < 11.1.4 |
| paloaltonetworks | pan-os | 11.1.8 ≤ 𝑥 < 11.1.10 |
| paloaltonetworks | pan-os | 11.1.11 ≤ 𝑥 < 11.1.13 |
| paloaltonetworks | pan-os | 11.1.14 ≤ 𝑥 < 11.1.16 |
| paloaltonetworks | pan-os | 11.1.4 |
| paloaltonetworks | pan-os | 11.1.4:h1 |
| paloaltonetworks | pan-os | 11.1.4:h10 |
| paloaltonetworks | pan-os | 11.1.4:h11 |
| paloaltonetworks | pan-os | 11.1.4:h12 |
| paloaltonetworks | pan-os | 11.1.4:h13 |
| paloaltonetworks | pan-os | 11.1.4:h15 |
| paloaltonetworks | pan-os | 11.1.4:h17 |
| paloaltonetworks | pan-os | 11.1.4:h18 |
| paloaltonetworks | pan-os | 11.1.4:h2 |
| paloaltonetworks | pan-os | 11.1.4:h25 |
| paloaltonetworks | pan-os | 11.1.4:h27 |
| paloaltonetworks | pan-os | 11.1.4:h3 |
| paloaltonetworks | pan-os | 11.1.4:h32 |
| paloaltonetworks | pan-os | 11.1.4:h33 |
| paloaltonetworks | pan-os | 11.1.4:h34 |
| paloaltonetworks | pan-os | 11.1.4:h4 |
| paloaltonetworks | pan-os | 11.1.4:h5 |
| paloaltonetworks | pan-os | 11.1.4:h6 |
| paloaltonetworks | pan-os | 11.1.4:h7 |
| paloaltonetworks | pan-os | 11.1.4:h8 |
| paloaltonetworks | pan-os | 11.1.4:h9 |
| paloaltonetworks | pan-os | 11.1.5 |
| paloaltonetworks | pan-os | 11.1.6 |
| paloaltonetworks | pan-os | 11.1.6:h1 |
| paloaltonetworks | pan-os | 11.1.6:h10 |
| paloaltonetworks | pan-os | 11.1.6:h14 |
| paloaltonetworks | pan-os | 11.1.6:h17 |
| paloaltonetworks | pan-os | 11.1.6:h18 |
| paloaltonetworks | pan-os | 11.1.6:h19 |
| paloaltonetworks | pan-os | 11.1.6:h2 |
| paloaltonetworks | pan-os | 11.1.6:h20 |
| paloaltonetworks | pan-os | 11.1.6:h21 |
| paloaltonetworks | pan-os | 11.1.6:h22 |
| paloaltonetworks | pan-os | 11.1.6:h23 |
| paloaltonetworks | pan-os | 11.1.6:h25 |
| paloaltonetworks | pan-os | 11.1.6:h29 |
| paloaltonetworks | pan-os | 11.1.6:h3 |
| paloaltonetworks | pan-os | 11.1.6:h32 |
| paloaltonetworks | pan-os | 11.1.6:h33 |
| paloaltonetworks | pan-os | 11.1.6:h34 |
| paloaltonetworks | pan-os | 11.1.6:h4 |
| paloaltonetworks | pan-os | 11.1.6:h6 |
| paloaltonetworks | pan-os | 11.1.6:h7 |
| paloaltonetworks | pan-os | 11.1.10 |
| paloaltonetworks | pan-os | 11.1.10:h1 |
| paloaltonetworks | pan-os | 11.1.10:h10 |
| paloaltonetworks | pan-os | 11.1.10:h12 |
| paloaltonetworks | pan-os | 11.1.10:h21 |
| paloaltonetworks | pan-os | 11.1.10:h25 |
| paloaltonetworks | pan-os | 11.1.10:h26 |
| paloaltonetworks | pan-os | 11.1.10:h27 |
| paloaltonetworks | pan-os | 11.1.10:h28 |
| paloaltonetworks | pan-os | 11.1.10:h4 |
| paloaltonetworks | pan-os | 11.1.10:h5 |
| paloaltonetworks | pan-os | 11.1.10:h7 |
| paloaltonetworks | pan-os | 11.1.10:h9 |
| paloaltonetworks | pan-os | 11.1.13 |
| paloaltonetworks | pan-os | 11.1.13:h1 |
| paloaltonetworks | pan-os | 11.1.13:h2 |
| paloaltonetworks | pan-os | 11.1.13:h3 |
| paloaltonetworks | pan-os | 11.1.13:h5 |
| paloaltonetworks | pan-os | 11.1.13:h6 |
| paloaltonetworks | pan-os | 11.1.13:h7 |
| paloaltonetworks | pan-os | 11.1.13:h8 |
| paloaltonetworks | pan-os | 11.2.0 ≤ 𝑥 < 11.2.4 |
| paloaltonetworks | pan-os | 11.2.5 ≤ 𝑥 < 11.2.7 |
| paloaltonetworks | pan-os | 11.2.8 ≤ 𝑥 < 11.2.10 |
| paloaltonetworks | pan-os | 11.2.11 ≤ 𝑥 < 11.2.13 |
| paloaltonetworks | pan-os | 11.2.4 |
| paloaltonetworks | pan-os | 11.2.4:h1 |
| paloaltonetworks | pan-os | 11.2.4:h10 |
| paloaltonetworks | pan-os | 11.2.4:h11 |
| paloaltonetworks | pan-os | 11.2.4:h12 |
| paloaltonetworks | pan-os | 11.2.4:h14 |
| paloaltonetworks | pan-os | 11.2.4:h15 |
| paloaltonetworks | pan-os | 11.2.4:h17 |
| paloaltonetworks | pan-os | 11.2.4:h18 |
| paloaltonetworks | pan-os | 11.2.4:h2 |
| paloaltonetworks | pan-os | 11.2.4:h3 |
| paloaltonetworks | pan-os | 11.2.4:h4 |
| paloaltonetworks | pan-os | 11.2.4:h5 |
| paloaltonetworks | pan-os | 11.2.4:h6 |
| paloaltonetworks | pan-os | 11.2.4:h7 |
| paloaltonetworks | pan-os | 11.2.4:h8 |
| paloaltonetworks | pan-os | 11.2.4:h9 |
| paloaltonetworks | pan-os | 11.2.7 |
| paloaltonetworks | pan-os | 11.2.7:h1 |
| paloaltonetworks | pan-os | 11.2.7:h10 |
| paloaltonetworks | pan-os | 11.2.7:h11 |
| paloaltonetworks | pan-os | 11.2.7:h12 |
| paloaltonetworks | pan-os | 11.2.7:h13 |
| paloaltonetworks | pan-os | 11.2.7:h14 |
| paloaltonetworks | pan-os | 11.2.7:h15 |
| paloaltonetworks | pan-os | 11.2.7:h16 |
| paloaltonetworks | pan-os | 11.2.7:h17 |
| paloaltonetworks | pan-os | 11.2.7:h2 |
| paloaltonetworks | pan-os | 11.2.7:h3 |
| paloaltonetworks | pan-os | 11.2.7:h4 |
| paloaltonetworks | pan-os | 11.2.7:h7 |
| paloaltonetworks | pan-os | 11.2.7:h8 |
| paloaltonetworks | pan-os | 11.2.10 |
| paloaltonetworks | pan-os | 11.2.10:h1 |
| paloaltonetworks | pan-os | 11.2.10:h10 |
| paloaltonetworks | pan-os | 11.2.10:h2 |
| paloaltonetworks | pan-os | 11.2.10:h3 |
| paloaltonetworks | pan-os | 11.2.10:h4 |
| paloaltonetworks | pan-os | 11.2.10:h5 |
| paloaltonetworks | pan-os | 11.2.10:h6 |
| paloaltonetworks | pan-os | 11.2.10:h7 |
| paloaltonetworks | pan-os | 11.2.10:h8 |
| paloaltonetworks | pan-os | 11.2.10:h9 |
| paloaltonetworks | pan-os | 12.1.2 ≤ 𝑥 < 12.1.4 |
| paloaltonetworks | pan-os | 12.1.5 ≤ 𝑥 < 12.1.7 |
| paloaltonetworks | pan-os | 12.1.4 |
| paloaltonetworks | pan-os | 12.1.4:h2 |
| paloaltonetworks | pan-os | 12.1.4:h3 |
| paloaltonetworks | pan-os | 12.1.4:h5 |
| paloaltonetworks | pan-os | 12.1.4:h6 |
| paloaltonetworks | pan-os | 12.1.4:h7 |
| paloaltonetworks | pan-os | 12.1.7 |
| paloaltonetworks | pan-os | 12.1.7:h1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Siemens | RUGGEDCOM APE1808 | 𝑥 < * | ADP |
Common Weakness Enumeration