CVE-2026-0288

Name of the Vulnerable Software and Affected Versions PAN-OS versions 12.1 PAN-OS versions 11.2 PAN-OS versions 11.1 PAN-OS versions 10.2 Prisma Access (affected versions not specified)

Description Multiple buffer overflow vulnerabilities exist in the User-ID Terminal Server Agent (TSA) component. An unauthenticated attacker with network access can send specially crafted network traffic to cause a denial of service (DoS) condition or potentially execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory locations.

Recommendations Restrict User-ID Terminal Server Agent connectivity to trusted internal IP addresses to minimize security risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.