7.5

CVE-2026-0288

Medienbericht

PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent

Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic.

The security risk posed by this issue is minimized when the User-ID Terminal Server Agent connectivity is restricted to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://docs.paloaltonetworks.com/ngfw/help/10-2/user-identification/device-user-identification-terminal-services-agents#:~:text=To%20minimize%20security%20risk%2C%20restrict%20TS%20Agent%20connectivity%20to%20trusted%20internal%20IP%20addresses%20only. .

Panorama is not impacted by this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
PaloaltonetworksPan-os Version >= 10.2.0 < 10.2.7
PaloaltonetworksPan-os Version >= 10.2.8 < 10.2.10
PaloaltonetworksPan-os Version >= 10.2.11 < 10.2.13
PaloaltonetworksPan-os Version >= 10.2.14 < 10.2.16
PaloaltonetworksPan-os Version10.2.7 Update-
PaloaltonetworksPan-os Version10.2.7 Updateh1
PaloaltonetworksPan-os Version10.2.7 Updateh10
PaloaltonetworksPan-os Version10.2.7 Updateh11
PaloaltonetworksPan-os Version10.2.7 Updateh12
PaloaltonetworksPan-os Version10.2.7 Updateh13
PaloaltonetworksPan-os Version10.2.7 Updateh14
PaloaltonetworksPan-os Version10.2.7 Updateh15
PaloaltonetworksPan-os Version10.2.7 Updateh16
PaloaltonetworksPan-os Version10.2.7 Updateh17
PaloaltonetworksPan-os Version10.2.7 Updateh18
PaloaltonetworksPan-os Version10.2.7 Updateh19
PaloaltonetworksPan-os Version10.2.7 Updateh2
PaloaltonetworksPan-os Version10.2.7 Updateh20
PaloaltonetworksPan-os Version10.2.7 Updateh21
PaloaltonetworksPan-os Version10.2.7 Updateh22
PaloaltonetworksPan-os Version10.2.7 Updateh23
PaloaltonetworksPan-os Version10.2.7 Updateh24
PaloaltonetworksPan-os Version10.2.7 Updateh3
PaloaltonetworksPan-os Version10.2.7 Updateh32
PaloaltonetworksPan-os Version10.2.7 Updateh34
PaloaltonetworksPan-os Version10.2.7 Updateh35
PaloaltonetworksPan-os Version10.2.7 Updateh4
PaloaltonetworksPan-os Version10.2.7 Updateh5
PaloaltonetworksPan-os Version10.2.7 Updateh6
PaloaltonetworksPan-os Version10.2.7 Updateh7
PaloaltonetworksPan-os Version10.2.7 Updateh8
PaloaltonetworksPan-os Version10.2.7 Updateh9
PaloaltonetworksPan-os Version10.2.10 Update-
PaloaltonetworksPan-os Version10.2.10 Updateh1
PaloaltonetworksPan-os Version10.2.10 Updateh10
PaloaltonetworksPan-os Version10.2.10 Updateh11
PaloaltonetworksPan-os Version10.2.10 Updateh12
PaloaltonetworksPan-os Version10.2.10 Updateh13
PaloaltonetworksPan-os Version10.2.10 Updateh14
PaloaltonetworksPan-os Version10.2.10 Updateh17
PaloaltonetworksPan-os Version10.2.10 Updateh18
PaloaltonetworksPan-os Version10.2.10 Updateh2
PaloaltonetworksPan-os Version10.2.10 Updateh21
PaloaltonetworksPan-os Version10.2.10 Updateh27
PaloaltonetworksPan-os Version10.2.10 Updateh3
PaloaltonetworksPan-os Version10.2.10 Updateh30
PaloaltonetworksPan-os Version10.2.10 Updateh31
PaloaltonetworksPan-os Version10.2.10 Updateh36
PaloaltonetworksPan-os Version10.2.10 Updateh37
PaloaltonetworksPan-os Version10.2.10 Updateh4
PaloaltonetworksPan-os Version10.2.10 Updateh5
PaloaltonetworksPan-os Version10.2.10 Updateh6
PaloaltonetworksPan-os Version10.2.10 Updateh7
PaloaltonetworksPan-os Version10.2.13 Update-
PaloaltonetworksPan-os Version10.2.13 Updateh1
PaloaltonetworksPan-os Version10.2.13 Updateh10
PaloaltonetworksPan-os Version10.2.13 Updateh15
PaloaltonetworksPan-os Version10.2.13 Updateh16
PaloaltonetworksPan-os Version10.2.13 Updateh18
PaloaltonetworksPan-os Version10.2.13 Updateh2
PaloaltonetworksPan-os Version10.2.13 Updateh21
PaloaltonetworksPan-os Version10.2.13 Updateh22
PaloaltonetworksPan-os Version10.2.13 Updateh3
PaloaltonetworksPan-os Version10.2.13 Updateh4
PaloaltonetworksPan-os Version10.2.13 Updateh5
PaloaltonetworksPan-os Version10.2.13 Updateh7
PaloaltonetworksPan-os Version10.2.16 Update-
PaloaltonetworksPan-os Version10.2.16 Updateh1
PaloaltonetworksPan-os Version10.2.16 Updateh4
PaloaltonetworksPan-os Version10.2.16 Updateh6
PaloaltonetworksPan-os Version10.2.16 Updateh7
PaloaltonetworksPan-os Version10.2.16 Updateh8
PaloaltonetworksPan-os Version10.2.17
PaloaltonetworksPan-os Version10.2.18 Updateh1
PaloaltonetworksPan-os Version10.2.18 Updateh5
PaloaltonetworksPan-os Version10.2.18 Updateh6
PaloaltonetworksPan-os Version10.2.18 Updateh7
PaloaltonetworksPan-os Version >= 11.1.0 < 11.1.4
PaloaltonetworksPan-os Version >= 11.1.8 < 11.1.10
PaloaltonetworksPan-os Version >= 11.1.11 < 11.1.13
PaloaltonetworksPan-os Version >= 11.1.14 < 11.1.16
PaloaltonetworksPan-os Version11.1.4 Update-
PaloaltonetworksPan-os Version11.1.4 Updateh1
PaloaltonetworksPan-os Version11.1.4 Updateh10
PaloaltonetworksPan-os Version11.1.4 Updateh11
PaloaltonetworksPan-os Version11.1.4 Updateh12
PaloaltonetworksPan-os Version11.1.4 Updateh13
PaloaltonetworksPan-os Version11.1.4 Updateh15
PaloaltonetworksPan-os Version11.1.4 Updateh17
PaloaltonetworksPan-os Version11.1.4 Updateh18
PaloaltonetworksPan-os Version11.1.4 Updateh2
PaloaltonetworksPan-os Version11.1.4 Updateh25
PaloaltonetworksPan-os Version11.1.4 Updateh27
PaloaltonetworksPan-os Version11.1.4 Updateh3
PaloaltonetworksPan-os Version11.1.4 Updateh32
PaloaltonetworksPan-os Version11.1.4 Updateh33
PaloaltonetworksPan-os Version11.1.4 Updateh34
PaloaltonetworksPan-os Version11.1.4 Updateh4
PaloaltonetworksPan-os Version11.1.4 Updateh5
PaloaltonetworksPan-os Version11.1.4 Updateh6
PaloaltonetworksPan-os Version11.1.4 Updateh7
PaloaltonetworksPan-os Version11.1.4 Updateh8
PaloaltonetworksPan-os Version11.1.4 Updateh9
PaloaltonetworksPan-os Version11.1.5
PaloaltonetworksPan-os Version11.1.6 Update-
PaloaltonetworksPan-os Version11.1.6 Updateh1
PaloaltonetworksPan-os Version11.1.6 Updateh10
PaloaltonetworksPan-os Version11.1.6 Updateh14
PaloaltonetworksPan-os Version11.1.6 Updateh17
PaloaltonetworksPan-os Version11.1.6 Updateh18
PaloaltonetworksPan-os Version11.1.6 Updateh19
PaloaltonetworksPan-os Version11.1.6 Updateh2
PaloaltonetworksPan-os Version11.1.6 Updateh20
PaloaltonetworksPan-os Version11.1.6 Updateh21
PaloaltonetworksPan-os Version11.1.6 Updateh22
PaloaltonetworksPan-os Version11.1.6 Updateh23
PaloaltonetworksPan-os Version11.1.6 Updateh25
PaloaltonetworksPan-os Version11.1.6 Updateh29
PaloaltonetworksPan-os Version11.1.6 Updateh3
PaloaltonetworksPan-os Version11.1.6 Updateh32
PaloaltonetworksPan-os Version11.1.6 Updateh33
PaloaltonetworksPan-os Version11.1.6 Updateh34
PaloaltonetworksPan-os Version11.1.6 Updateh4
PaloaltonetworksPan-os Version11.1.6 Updateh6
PaloaltonetworksPan-os Version11.1.6 Updateh7
PaloaltonetworksPan-os Version11.1.10 Update-
PaloaltonetworksPan-os Version11.1.10 Updateh1
PaloaltonetworksPan-os Version11.1.10 Updateh10
PaloaltonetworksPan-os Version11.1.10 Updateh12
PaloaltonetworksPan-os Version11.1.10 Updateh21
PaloaltonetworksPan-os Version11.1.10 Updateh25
PaloaltonetworksPan-os Version11.1.10 Updateh26
PaloaltonetworksPan-os Version11.1.10 Updateh27
PaloaltonetworksPan-os Version11.1.10 Updateh28
PaloaltonetworksPan-os Version11.1.10 Updateh4
PaloaltonetworksPan-os Version11.1.10 Updateh5
PaloaltonetworksPan-os Version11.1.10 Updateh7
PaloaltonetworksPan-os Version11.1.10 Updateh9
PaloaltonetworksPan-os Version11.1.13 Update-
PaloaltonetworksPan-os Version11.1.13 Updateh1
PaloaltonetworksPan-os Version11.1.13 Updateh2
PaloaltonetworksPan-os Version11.1.13 Updateh3
PaloaltonetworksPan-os Version11.1.13 Updateh5
PaloaltonetworksPan-os Version11.1.13 Updateh6
PaloaltonetworksPan-os Version11.1.13 Updateh7
PaloaltonetworksPan-os Version11.1.13 Updateh8
PaloaltonetworksPan-os Version >= 11.2.0 < 11.2.4
PaloaltonetworksPan-os Version >= 11.2.5 < 11.2.7
PaloaltonetworksPan-os Version >= 11.2.8 < 11.2.10
PaloaltonetworksPan-os Version >= 11.2.11 < 11.2.13
PaloaltonetworksPan-os Version11.2.4 Update-
PaloaltonetworksPan-os Version11.2.4 Updateh1
PaloaltonetworksPan-os Version11.2.4 Updateh10
PaloaltonetworksPan-os Version11.2.4 Updateh11
PaloaltonetworksPan-os Version11.2.4 Updateh12
PaloaltonetworksPan-os Version11.2.4 Updateh14
PaloaltonetworksPan-os Version11.2.4 Updateh15
PaloaltonetworksPan-os Version11.2.4 Updateh17
PaloaltonetworksPan-os Version11.2.4 Updateh18
PaloaltonetworksPan-os Version11.2.4 Updateh2
PaloaltonetworksPan-os Version11.2.4 Updateh3
PaloaltonetworksPan-os Version11.2.4 Updateh4
PaloaltonetworksPan-os Version11.2.4 Updateh5
PaloaltonetworksPan-os Version11.2.4 Updateh6
PaloaltonetworksPan-os Version11.2.4 Updateh7
PaloaltonetworksPan-os Version11.2.4 Updateh8
PaloaltonetworksPan-os Version11.2.4 Updateh9
PaloaltonetworksPan-os Version11.2.7 Update-
PaloaltonetworksPan-os Version11.2.7 Updateh1
PaloaltonetworksPan-os Version11.2.7 Updateh10
PaloaltonetworksPan-os Version11.2.7 Updateh11
PaloaltonetworksPan-os Version11.2.7 Updateh12
PaloaltonetworksPan-os Version11.2.7 Updateh13
PaloaltonetworksPan-os Version11.2.7 Updateh14
PaloaltonetworksPan-os Version11.2.7 Updateh15
PaloaltonetworksPan-os Version11.2.7 Updateh16
PaloaltonetworksPan-os Version11.2.7 Updateh17
PaloaltonetworksPan-os Version11.2.7 Updateh2
PaloaltonetworksPan-os Version11.2.7 Updateh3
PaloaltonetworksPan-os Version11.2.7 Updateh4
PaloaltonetworksPan-os Version11.2.7 Updateh7
PaloaltonetworksPan-os Version11.2.7 Updateh8
PaloaltonetworksPan-os Version11.2.10 Update-
PaloaltonetworksPan-os Version11.2.10 Updateh1
PaloaltonetworksPan-os Version11.2.10 Updateh10
PaloaltonetworksPan-os Version11.2.10 Updateh2
PaloaltonetworksPan-os Version11.2.10 Updateh3
PaloaltonetworksPan-os Version11.2.10 Updateh4
PaloaltonetworksPan-os Version11.2.10 Updateh5
PaloaltonetworksPan-os Version11.2.10 Updateh6
PaloaltonetworksPan-os Version11.2.10 Updateh7
PaloaltonetworksPan-os Version11.2.10 Updateh8
PaloaltonetworksPan-os Version11.2.10 Updateh9
PaloaltonetworksPan-os Version >= 12.1.2 < 12.1.4
PaloaltonetworksPan-os Version >= 12.1.5 < 12.1.7
PaloaltonetworksPan-os Version12.1.4 Update-
PaloaltonetworksPan-os Version12.1.4 Updateh2
PaloaltonetworksPan-os Version12.1.4 Updateh3
PaloaltonetworksPan-os Version12.1.4 Updateh5
PaloaltonetworksPan-os Version12.1.4 Updateh6
PaloaltonetworksPan-os Version12.1.4 Updateh7
PaloaltonetworksPan-os Version12.1.7 Update-
PaloaltonetworksPan-os Version12.1.7 Updateh1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.96% 0.583
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
psirt@paloaltonetworks.com 7.2 0 0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
22.07.2026 16:31
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
13.07.2026 17:25
https://security.paloaltonetworks.com/
Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-104023.html