Loading vulnerability…
Buffer Overflows in Palo Alto Networks PAN-OS User-ID Terminal Server Agent
CVE-2026-0288 comprises multiple buffer overflow vulnerabilities involving out-of-bounds writes in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS. An unauthenticated attacker with network access to the TSA service can send specially crafted traffic to corrupt memory, causing denial of service or potentially executing arbitrary code. PAN-OS devices are affected only when at least one Terminal Server Agent entry is configured. Affected release families include PAN-OS 10.2, 11.1, 11.2, and 12.1, and Prisma Access 10.2 and 11.2. Prisma Access exploitation requires authentication. Panorama and Cloud NGFW on AWS are not affected.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can disrupt the affected service or device through memory corruption, resulting in denial of service. Arbitrary code execution is also a potential outcome, with corresponding risks to system confidentiality and integrity. The execution privilege level and extent of device compromise are not established. Exposure to untrusted networks increases risk; restricting TSA connectivity to trusted internal addresses reduces exposure but does not correct the underlying flaws.
If you can’t patch tonight, do this now.
Restrict User-ID Terminal Server Agent connectivity to trusted internal IP addresses only, using network access controls to prevent internet and other untrusted-network access to the TSA service. This reduces the reachable attack surface but does not eliminate the vulnerability or protect against an attacker operating from an allowed address.
Patch, then assume compromise.
Apply the vendor-provided fixed release appropriate to the installed maintenance branch, or a later release containing the fix. Fixed PAN-OS releases include: 12.1.4-h8, 12.1.7-h2, and 12.1.8; 11.2.4-h20, 11.2.7-h18, 11.2.10-h12, and 11.2.13; 11.1.4-h35, 11.1.6-h35, 11.1.7-h8, 11.1.10-h30, 11.1.13-h9, and 11.1.16; and 10.2.7-h36, 10.2.10-h39, 10.2.13-h23, 10.2.16-h9, and 10.2.18-h8. Fixed Prisma Access releases include 11.2.7-h8 and 10.2.10-h39. Prisma Access upgrades are deployed during scheduled maintenance, with on-demand upgrades available through Palo Alto Networks support. For RUGGEDCOM APE1808 deployments running Palo Alto Networks Virtual NGFW, contact Siemens support for applicable patch and update guidance.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
26 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.