Vulnerability-Lookup

CVE-2026-0303 (GCVE-0-2026-0303)

Vulnerability from cvelistv5 – Published: 2026-09-10 06:03 – Updated: 2026-09-10 06:03

Title

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

Summary

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

Severity

2.4 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber

CWE

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0303	vendor-advisory

Impacted products

1 product

Vendor	Product	Version	CPE status
Palo Alto Networks	Checkov by Prisma Cloud	Affected: 3.2.0 , < 3.2.532 (custom) cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud::::::::

Date Public

2026-09-09 16:00

Credits

Michael Adedeji

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.532",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.2.532",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be vulnerable to this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.2.532",
                  "versionStartIncluding": "3.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Michael Adedeji"
        }
      ],
      "datePublic": "2026-09-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 2.4,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-829",
              "description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-10T06:03:50.513Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0303"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e3.2.0 through 3.2.531\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 3.2.532or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                Checkov by Prisma Cloud 3.2\n\n                                3.2.0 through 3.2.531\n                                Upgrade to 3.2.532or later.\n                            \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-09T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
            }
          ],
          "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
        }
      ],
      "x_affectedList": [
        "Checkov by Prisma Cloud 3.2.0",
        "Checkov by Prisma Cloud 3.2.1",
        "Checkov by Prisma Cloud 3.2.2",
        "Checkov by Prisma Cloud 3.2.3",
        "Checkov by Prisma Cloud 3.2.4",
        "Checkov by Prisma Cloud 3.2.5",
        "Checkov by Prisma Cloud 3.2.6",
        "Checkov by Prisma Cloud 3.2.7",
        "Checkov by Prisma Cloud 3.2.8",
        "Checkov by Prisma Cloud 3.2.9",
        "Checkov by Prisma Cloud 3.2.10",
        "Checkov by Prisma Cloud 3.2.11",
        "Checkov by Prisma Cloud 3.2.12",
        "Checkov by Prisma Cloud 3.2.13",
        "Checkov by Prisma Cloud 3.2.14",
        "Checkov by Prisma Cloud 3.2.15",
        "Checkov by Prisma Cloud 3.2.16",
        "Checkov by Prisma Cloud 3.2.17",
        "Checkov by Prisma Cloud 3.2.18",
        "Checkov by Prisma Cloud 3.2.19",
        "Checkov by Prisma Cloud 3.2.20",
        "Checkov by Prisma Cloud 3.2.21",
        "Checkov by Prisma Cloud 3.2.22",
        "Checkov by Prisma Cloud 3.2.23",
        "Checkov by Prisma Cloud 3.2.24",
        "Checkov by Prisma Cloud 3.2.25",
        "Checkov by Prisma Cloud 3.2.26",
        "Checkov by Prisma Cloud 3.2.27",
        "Checkov by Prisma Cloud 3.2.28",
        "Checkov by Prisma Cloud 3.2.29",
        "Checkov by Prisma Cloud 3.2.30",
        "Checkov by Prisma Cloud 3.2.31",
        "Checkov by Prisma Cloud 3.2.32",
        "Checkov by Prisma Cloud 3.2.33",
        "Checkov by Prisma Cloud 3.2.34",
        "Checkov by Prisma Cloud 3.2.35",
        "Checkov by Prisma Cloud 3.2.36",
        "Checkov by Prisma Cloud 3.2.37",
        "Checkov by Prisma Cloud 3.2.38",
        "Checkov by Prisma Cloud 3.2.39",
        "Checkov by Prisma Cloud 3.2.40",
        "Checkov by Prisma Cloud 3.2.41",
        "Checkov by Prisma Cloud 3.2.42",
        "Checkov by Prisma Cloud 3.2.43",
        "Checkov by Prisma Cloud 3.2.44",
        "Checkov by Prisma Cloud 3.2.45",
        "Checkov by Prisma Cloud 3.2.46",
        "Checkov by Prisma Cloud 3.2.47",
        "Checkov by Prisma Cloud 3.2.48",
        "Checkov by Prisma Cloud 3.2.49",
        "Checkov by Prisma Cloud 3.2.50",
        "Checkov by Prisma Cloud 3.2.51",
        "Checkov by Prisma Cloud 3.2.52",
        "Checkov by Prisma Cloud 3.2.53",
        "Checkov by Prisma Cloud 3.2.54",
        "Checkov by Prisma Cloud 3.2.55",
        "Checkov by Prisma Cloud 3.2.56",
        "Checkov by Prisma Cloud 3.2.57",
        "Checkov by Prisma Cloud 3.2.58",
        "Checkov by Prisma Cloud 3.2.59",
        "Checkov by Prisma Cloud 3.2.60",
        "Checkov by Prisma Cloud 3.2.61",
        "Checkov by Prisma Cloud 3.2.62",
        "Checkov by Prisma Cloud 3.2.63",
        "Checkov by Prisma Cloud 3.2.64",
        "Checkov by Prisma Cloud 3.2.65",
        "Checkov by Prisma Cloud 3.2.66",
        "Checkov by Prisma Cloud 3.2.67",
        "Checkov by Prisma Cloud 3.2.68",
        "Checkov by Prisma Cloud 3.2.69",
        "Checkov by Prisma Cloud 3.2.70",
        "Checkov by Prisma Cloud 3.2.71",
        "Checkov by Prisma Cloud 3.2.72",
        "Checkov by Prisma Cloud 3.2.73",
        "Checkov by Prisma Cloud 3.2.74",
        "Checkov by Prisma Cloud 3.2.75",
        "Checkov by Prisma Cloud 3.2.76",
        "Checkov by Prisma Cloud 3.2.77",
        "Checkov by Prisma Cloud 3.2.78",
        "Checkov by Prisma Cloud 3.2.79",
        "Checkov by Prisma Cloud 3.2.80",
        "Checkov by Prisma Cloud 3.2.81",
        "Checkov by Prisma Cloud 3.2.82",
        "Checkov by Prisma Cloud 3.2.83",
        "Checkov by Prisma Cloud 3.2.84",
        "Checkov by Prisma Cloud 3.2.85",
        "Checkov by Prisma Cloud 3.2.86",
        "Checkov by Prisma Cloud 3.2.87",
        "Checkov by Prisma Cloud 3.2.88",
        "Checkov by Prisma Cloud 3.2.89",
        "Checkov by Prisma Cloud 3.2.90",
        "Checkov by Prisma Cloud 3.2.91",
        "Checkov by Prisma Cloud 3.2.92",
        "Checkov by Prisma Cloud 3.2.93",
        "Checkov by Prisma Cloud 3.2.94",
        "Checkov by Prisma Cloud 3.2.95",
        "Checkov by Prisma Cloud 3.2.96",
        "Checkov by Prisma Cloud 3.2.97",
        "Checkov by Prisma Cloud 3.2.98",
        "Checkov by Prisma Cloud 3.2.99",
        "Checkov by Prisma Cloud 3.2.100",
        "Checkov by Prisma Cloud 3.2.101",
        "Checkov by Prisma Cloud 3.2.102",
        "Checkov by Prisma Cloud 3.2.103",
        "Checkov by Prisma Cloud 3.2.104",
        "Checkov by Prisma Cloud 3.2.105",
        "Checkov by Prisma Cloud 3.2.106",
        "Checkov by Prisma Cloud 3.2.107",
        "Checkov by Prisma Cloud 3.2.108",
        "Checkov by Prisma Cloud 3.2.109",
        "Checkov by Prisma Cloud 3.2.110",
        "Checkov by Prisma Cloud 3.2.111",
        "Checkov by Prisma Cloud 3.2.112",
        "Checkov by Prisma Cloud 3.2.113",
        "Checkov by Prisma Cloud 3.2.114",
        "Checkov by Prisma Cloud 3.2.115",
        "Checkov by Prisma Cloud 3.2.116",
        "Checkov by Prisma Cloud 3.2.117",
        "Checkov by Prisma Cloud 3.2.118",
        "Checkov by Prisma Cloud 3.2.119",
        "Checkov by Prisma Cloud 3.2.120",
        "Checkov by Prisma Cloud 3.2.121",
        "Checkov by Prisma Cloud 3.2.122",
        "Checkov by Prisma Cloud 3.2.123",
        "Checkov by Prisma Cloud 3.2.124",
        "Checkov by Prisma Cloud 3.2.125",
        "Checkov by Prisma Cloud 3.2.126",
        "Checkov by Prisma Cloud 3.2.127",
        "Checkov by Prisma Cloud 3.2.128",
        "Checkov by Prisma Cloud 3.2.129",
        "Checkov by Prisma Cloud 3.2.130",
        "Checkov by Prisma Cloud 3.2.131",
        "Checkov by Prisma Cloud 3.2.132",
        "Checkov by Prisma Cloud 3.2.133",
        "Checkov by Prisma Cloud 3.2.134",
        "Checkov by Prisma Cloud 3.2.135",
        "Checkov by Prisma Cloud 3.2.136",
        "Checkov by Prisma Cloud 3.2.137",
        "Checkov by Prisma Cloud 3.2.138",
        "Checkov by Prisma Cloud 3.2.139",
        "Checkov by Prisma Cloud 3.2.140",
        "Checkov by Prisma Cloud 3.2.141",
        "Checkov by Prisma Cloud 3.2.142",
        "Checkov by Prisma Cloud 3.2.143",
        "Checkov by Prisma Cloud 3.2.144",
        "Checkov by Prisma Cloud 3.2.145",
        "Checkov by Prisma Cloud 3.2.146",
        "Checkov by Prisma Cloud 3.2.147",
        "Checkov by Prisma Cloud 3.2.148",
        "Checkov by Prisma Cloud 3.2.149",
        "Checkov by Prisma Cloud 3.2.150",
        "Checkov by Prisma Cloud 3.2.151",
        "Checkov by Prisma Cloud 3.2.152",
        "Checkov by Prisma Cloud 3.2.153",
        "Checkov by Prisma Cloud 3.2.154",
        "Checkov by Prisma Cloud 3.2.155",
        "Checkov by Prisma Cloud 3.2.156",
        "Checkov by Prisma Cloud 3.2.157",
        "Checkov by Prisma Cloud 3.2.158",
        "Checkov by Prisma Cloud 3.2.159",
        "Checkov by Prisma Cloud 3.2.160",
        "Checkov by Prisma Cloud 3.2.161",
        "Checkov by Prisma Cloud 3.2.162",
        "Checkov by Prisma Cloud 3.2.163",
        "Checkov by Prisma Cloud 3.2.164",
        "Checkov by Prisma Cloud 3.2.165",
        "Checkov by Prisma Cloud 3.2.166",
        "Checkov by Prisma Cloud 3.2.167",
        "Checkov by Prisma Cloud 3.2.168",
        "Checkov by Prisma Cloud 3.2.169",
        "Checkov by Prisma Cloud 3.2.170",
        "Checkov by Prisma Cloud 3.2.171",
        "Checkov by Prisma Cloud 3.2.172",
        "Checkov by Prisma Cloud 3.2.173",
        "Checkov by Prisma Cloud 3.2.174",
        "Checkov by Prisma Cloud 3.2.175",
        "Checkov by Prisma Cloud 3.2.176",
        "Checkov by Prisma Cloud 3.2.177",
        "Checkov by Prisma Cloud 3.2.178",
        "Checkov by Prisma Cloud 3.2.179",
        "Checkov by Prisma Cloud 3.2.180",
        "Checkov by Prisma Cloud 3.2.181",
        "Checkov by Prisma Cloud 3.2.182",
        "Checkov by Prisma Cloud 3.2.183",
        "Checkov by Prisma Cloud 3.2.184",
        "Checkov by Prisma Cloud 3.2.185",
        "Checkov by Prisma Cloud 3.2.186",
        "Checkov by Prisma Cloud 3.2.187",
        "Checkov by Prisma Cloud 3.2.188",
        "Checkov by Prisma Cloud 3.2.189",
        "Checkov by Prisma Cloud 3.2.190",
        "Checkov by Prisma Cloud 3.2.191",
        "Checkov by Prisma Cloud 3.2.192",
        "Checkov by Prisma Cloud 3.2.193",
        "Checkov by Prisma Cloud 3.2.194",
        "Checkov by Prisma Cloud 3.2.195",
        "Checkov by Prisma Cloud 3.2.196",
        "Checkov by Prisma Cloud 3.2.197",
        "Checkov by Prisma Cloud 3.2.198",
        "Checkov by Prisma Cloud 3.2.199",
        "Checkov by Prisma Cloud 3.2.200",
        "Checkov by Prisma Cloud 3.2.201",
        "Checkov by Prisma Cloud 3.2.202",
        "Checkov by Prisma Cloud 3.2.203",
        "Checkov by Prisma Cloud 3.2.204",
        "Checkov by Prisma Cloud 3.2.205",
        "Checkov by Prisma Cloud 3.2.206",
        "Checkov by Prisma Cloud 3.2.207",
        "Checkov by Prisma Cloud 3.2.208",
        "Checkov by Prisma Cloud 3.2.209",
        "Checkov by Prisma Cloud 3.2.210",
        "Checkov by Prisma Cloud 3.2.211",
        "Checkov by Prisma Cloud 3.2.212",
        "Checkov by Prisma Cloud 3.2.213",
        "Checkov by Prisma Cloud 3.2.214",
        "Checkov by Prisma Cloud 3.2.215",
        "Checkov by Prisma Cloud 3.2.216",
        "Checkov by Prisma Cloud 3.2.217",
        "Checkov by Prisma Cloud 3.2.218",
        "Checkov by Prisma Cloud 3.2.219",
        "Checkov by Prisma Cloud 3.2.220",
        "Checkov by Prisma Cloud 3.2.221",
        "Checkov by Prisma Cloud 3.2.222",
        "Checkov by Prisma Cloud 3.2.223",
        "Checkov by Prisma Cloud 3.2.224",
        "Checkov by Prisma Cloud 3.2.225",
        "Checkov by Prisma Cloud 3.2.226",
        "Checkov by Prisma Cloud 3.2.227",
        "Checkov by Prisma Cloud 3.2.228",
        "Checkov by Prisma Cloud 3.2.229",
        "Checkov by Prisma Cloud 3.2.230",
        "Checkov by Prisma Cloud 3.2.231",
        "Checkov by Prisma Cloud 3.2.232",
        "Checkov by Prisma Cloud 3.2.233",
        "Checkov by Prisma Cloud 3.2.234",
        "Checkov by Prisma Cloud 3.2.235",
        "Checkov by Prisma Cloud 3.2.236",
        "Checkov by Prisma Cloud 3.2.237",
        "Checkov by Prisma Cloud 3.2.238",
        "Checkov by Prisma Cloud 3.2.239",
        "Checkov by Prisma Cloud 3.2.240",
        "Checkov by Prisma Cloud 3.2.241",
        "Checkov by Prisma Cloud 3.2.242",
        "Checkov by Prisma Cloud 3.2.243",
        "Checkov by Prisma Cloud 3.2.244",
        "Checkov by Prisma Cloud 3.2.245",
        "Checkov by Prisma Cloud 3.2.246",
        "Checkov by Prisma Cloud 3.2.247",
        "Checkov by Prisma Cloud 3.2.248",
        "Checkov by Prisma Cloud 3.2.249",
        "Checkov by Prisma Cloud 3.2.250",
        "Checkov by Prisma Cloud 3.2.251",
        "Checkov by Prisma Cloud 3.2.252",
        "Checkov by Prisma Cloud 3.2.253",
        "Checkov by Prisma Cloud 3.2.254",
        "Checkov by Prisma Cloud 3.2.255",
        "Checkov by Prisma Cloud 3.2.256",
        "Checkov by Prisma Cloud 3.2.257",
        "Checkov by Prisma Cloud 3.2.258",
        "Checkov by Prisma Cloud 3.2.259",
        "Checkov by Prisma Cloud 3.2.260",
        "Checkov by Prisma Cloud 3.2.261",
        "Checkov by Prisma Cloud 3.2.262",
        "Checkov by Prisma Cloud 3.2.263",
        "Checkov by Prisma Cloud 3.2.264",
        "Checkov by Prisma Cloud 3.2.265",
        "Checkov by Prisma Cloud 3.2.266",
        "Checkov by Prisma Cloud 3.2.267",
        "Checkov by Prisma Cloud 3.2.268",
        "Checkov by Prisma Cloud 3.2.269",
        "Checkov by Prisma Cloud 3.2.270",
        "Checkov by Prisma Cloud 3.2.271",
        "Checkov by Prisma Cloud 3.2.272",
        "Checkov by Prisma Cloud 3.2.273",
        "Checkov by Prisma Cloud 3.2.274",
        "Checkov by Prisma Cloud 3.2.275",
        "Checkov by Prisma Cloud 3.2.276",
        "Checkov by Prisma Cloud 3.2.277",
        "Checkov by Prisma Cloud 3.2.278",
        "Checkov by Prisma Cloud 3.2.279",
        "Checkov by Prisma Cloud 3.2.280",
        "Checkov by Prisma Cloud 3.2.281",
        "Checkov by Prisma Cloud 3.2.282",
        "Checkov by Prisma Cloud 3.2.283",
        "Checkov by Prisma Cloud 3.2.284",
        "Checkov by Prisma Cloud 3.2.285",
        "Checkov by Prisma Cloud 3.2.286",
        "Checkov by Prisma Cloud 3.2.287",
        "Checkov by Prisma Cloud 3.2.288",
        "Checkov by Prisma Cloud 3.2.289",
        "Checkov by Prisma Cloud 3.2.290",
        "Checkov by Prisma Cloud 3.2.291",
        "Checkov by Prisma Cloud 3.2.292",
        "Checkov by Prisma Cloud 3.2.293",
        "Checkov by Prisma Cloud 3.2.294",
        "Checkov by Prisma Cloud 3.2.295",
        "Checkov by Prisma Cloud 3.2.296",
        "Checkov by Prisma Cloud 3.2.297",
        "Checkov by Prisma Cloud 3.2.298",
        "Checkov by Prisma Cloud 3.2.299",
        "Checkov by Prisma Cloud 3.2.300",
        "Checkov by Prisma Cloud 3.2.301",
        "Checkov by Prisma Cloud 3.2.302",
        "Checkov by Prisma Cloud 3.2.303",
        "Checkov by Prisma Cloud 3.2.304",
        "Checkov by Prisma Cloud 3.2.305",
        "Checkov by Prisma Cloud 3.2.306",
        "Checkov by Prisma Cloud 3.2.307",
        "Checkov by Prisma Cloud 3.2.308",
        "Checkov by Prisma Cloud 3.2.309",
        "Checkov by Prisma Cloud 3.2.310",
        "Checkov by Prisma Cloud 3.2.311",
        "Checkov by Prisma Cloud 3.2.312",
        "Checkov by Prisma Cloud 3.2.313",
        "Checkov by Prisma Cloud 3.2.314",
        "Checkov by Prisma Cloud 3.2.315",
        "Checkov by Prisma Cloud 3.2.316",
        "Checkov by Prisma Cloud 3.2.317",
        "Checkov by Prisma Cloud 3.2.318",
        "Checkov by Prisma Cloud 3.2.319",
        "Checkov by Prisma Cloud 3.2.320",
        "Checkov by Prisma Cloud 3.2.321",
        "Checkov by Prisma Cloud 3.2.322",
        "Checkov by Prisma Cloud 3.2.323",
        "Checkov by Prisma Cloud 3.2.324",
        "Checkov by Prisma Cloud 3.2.325",
        "Checkov by Prisma Cloud 3.2.326",
        "Checkov by Prisma Cloud 3.2.327",
        "Checkov by Prisma Cloud 3.2.328",
        "Checkov by Prisma Cloud 3.2.329",
        "Checkov by Prisma Cloud 3.2.330",
        "Checkov by Prisma Cloud 3.2.331",
        "Checkov by Prisma Cloud 3.2.332",
        "Checkov by Prisma Cloud 3.2.333",
        "Checkov by Prisma Cloud 3.2.334",
        "Checkov by Prisma Cloud 3.2.335",
        "Checkov by Prisma Cloud 3.2.336",
        "Checkov by Prisma Cloud 3.2.337",
        "Checkov by Prisma Cloud 3.2.338",
        "Checkov by Prisma Cloud 3.2.339",
        "Checkov by Prisma Cloud 3.2.340",
        "Checkov by Prisma Cloud 3.2.341",
        "Checkov by Prisma Cloud 3.2.342",
        "Checkov by Prisma Cloud 3.2.343",
        "Checkov by Prisma Cloud 3.2.344",
        "Checkov by Prisma Cloud 3.2.345",
        "Checkov by Prisma Cloud 3.2.346",
        "Checkov by Prisma Cloud 3.2.347",
        "Checkov by Prisma Cloud 3.2.348",
        "Checkov by Prisma Cloud 3.2.349",
        "Checkov by Prisma Cloud 3.2.350",
        "Checkov by Prisma Cloud 3.2.351",
        "Checkov by Prisma Cloud 3.2.352",
        "Checkov by Prisma Cloud 3.2.353",
        "Checkov by Prisma Cloud 3.2.354",
        "Checkov by Prisma Cloud 3.2.355",
        "Checkov by Prisma Cloud 3.2.356",
        "Checkov by Prisma Cloud 3.2.357",
        "Checkov by Prisma Cloud 3.2.358",
        "Checkov by Prisma Cloud 3.2.359",
        "Checkov by Prisma Cloud 3.2.360",
        "Checkov by Prisma Cloud 3.2.361",
        "Checkov by Prisma Cloud 3.2.362",
        "Checkov by Prisma Cloud 3.2.363",
        "Checkov by Prisma Cloud 3.2.364",
        "Checkov by Prisma Cloud 3.2.365",
        "Checkov by Prisma Cloud 3.2.366",
        "Checkov by Prisma Cloud 3.2.367",
        "Checkov by Prisma Cloud 3.2.368",
        "Checkov by Prisma Cloud 3.2.369",
        "Checkov by Prisma Cloud 3.2.370",
        "Checkov by Prisma Cloud 3.2.371",
        "Checkov by Prisma Cloud 3.2.372",
        "Checkov by Prisma Cloud 3.2.373",
        "Checkov by Prisma Cloud 3.2.374",
        "Checkov by Prisma Cloud 3.2.375",
        "Checkov by Prisma Cloud 3.2.376",
        "Checkov by Prisma Cloud 3.2.377",
        "Checkov by Prisma Cloud 3.2.378",
        "Checkov by Prisma Cloud 3.2.379",
        "Checkov by Prisma Cloud 3.2.380",
        "Checkov by Prisma Cloud 3.2.381",
        "Checkov by Prisma Cloud 3.2.382",
        "Checkov by Prisma Cloud 3.2.383",
        "Checkov by Prisma Cloud 3.2.384",
        "Checkov by Prisma Cloud 3.2.385",
        "Checkov by Prisma Cloud 3.2.386",
        "Checkov by Prisma Cloud 3.2.387",
        "Checkov by Prisma Cloud 3.2.388",
        "Checkov by Prisma Cloud 3.2.389",
        "Checkov by Prisma Cloud 3.2.390",
        "Checkov by Prisma Cloud 3.2.391",
        "Checkov by Prisma Cloud 3.2.392",
        "Checkov by Prisma Cloud 3.2.393",
        "Checkov by Prisma Cloud 3.2.394",
        "Checkov by Prisma Cloud 3.2.395",
        "Checkov by Prisma Cloud 3.2.396",
        "Checkov by Prisma Cloud 3.2.397",
        "Checkov by Prisma Cloud 3.2.398",
        "Checkov by Prisma Cloud 3.2.399",
        "Checkov by Prisma Cloud 3.2.400",
        "Checkov by Prisma Cloud 3.2.401",
        "Checkov by Prisma Cloud 3.2.402",
        "Checkov by Prisma Cloud 3.2.403",
        "Checkov by Prisma Cloud 3.2.404",
        "Checkov by Prisma Cloud 3.2.405",
        "Checkov by Prisma Cloud 3.2.406",
        "Checkov by Prisma Cloud 3.2.407",
        "Checkov by Prisma Cloud 3.2.408",
        "Checkov by Prisma Cloud 3.2.409",
        "Checkov by Prisma Cloud 3.2.410",
        "Checkov by Prisma Cloud 3.2.411",
        "Checkov by Prisma Cloud 3.2.412",
        "Checkov by Prisma Cloud 3.2.413",
        "Checkov by Prisma Cloud 3.2.414",
        "Checkov by Prisma Cloud 3.2.415",
        "Checkov by Prisma Cloud 3.2.416",
        "Checkov by Prisma Cloud 3.2.417",
        "Checkov by Prisma Cloud 3.2.418",
        "Checkov by Prisma Cloud 3.2.419",
        "Checkov by Prisma Cloud 3.2.420",
        "Checkov by Prisma Cloud 3.2.421",
        "Checkov by Prisma Cloud 3.2.422",
        "Checkov by Prisma Cloud 3.2.423",
        "Checkov by Prisma Cloud 3.2.424",
        "Checkov by Prisma Cloud 3.2.425",
        "Checkov by Prisma Cloud 3.2.426",
        "Checkov by Prisma Cloud 3.2.427",
        "Checkov by Prisma Cloud 3.2.428",
        "Checkov by Prisma Cloud 3.2.429",
        "Checkov by Prisma Cloud 3.2.430",
        "Checkov by Prisma Cloud 3.2.431",
        "Checkov by Prisma Cloud 3.2.432",
        "Checkov by Prisma Cloud 3.2.433",
        "Checkov by Prisma Cloud 3.2.434",
        "Checkov by Prisma Cloud 3.2.435",
        "Checkov by Prisma Cloud 3.2.436",
        "Checkov by Prisma Cloud 3.2.437",
        "Checkov by Prisma Cloud 3.2.438",
        "Checkov by Prisma Cloud 3.2.439",
        "Checkov by Prisma Cloud 3.2.440",
        "Checkov by Prisma Cloud 3.2.441",
        "Checkov by Prisma Cloud 3.2.442",
        "Checkov by Prisma Cloud 3.2.443",
        "Checkov by Prisma Cloud 3.2.444",
        "Checkov by Prisma Cloud 3.2.445",
        "Checkov by Prisma Cloud 3.2.446",
        "Checkov by Prisma Cloud 3.2.447",
        "Checkov by Prisma Cloud 3.2.448",
        "Checkov by Prisma Cloud 3.2.449",
        "Checkov by Prisma Cloud 3.2.450",
        "Checkov by Prisma Cloud 3.2.451",
        "Checkov by Prisma Cloud 3.2.452",
        "Checkov by Prisma Cloud 3.2.453",
        "Checkov by Prisma Cloud 3.2.454",
        "Checkov by Prisma Cloud 3.2.455",
        "Checkov by Prisma Cloud 3.2.456",
        "Checkov by Prisma Cloud 3.2.457",
        "Checkov by Prisma Cloud 3.2.458",
        "Checkov by Prisma Cloud 3.2.459",
        "Checkov by Prisma Cloud 3.2.460",
        "Checkov by Prisma Cloud 3.2.461",
        "Checkov by Prisma Cloud 3.2.462",
        "Checkov by Prisma Cloud 3.2.463",
        "Checkov by Prisma Cloud 3.2.464",
        "Checkov by Prisma Cloud 3.2.465",
        "Checkov by Prisma Cloud 3.2.466",
        "Checkov by Prisma Cloud 3.2.467",
        "Checkov by Prisma Cloud 3.2.468",
        "Checkov by Prisma Cloud 3.2.469",
        "Checkov by Prisma Cloud 3.2.470",
        "Checkov by Prisma Cloud 3.2.471",
        "Checkov by Prisma Cloud 3.2.472",
        "Checkov by Prisma Cloud 3.2.473",
        "Checkov by Prisma Cloud 3.2.474",
        "Checkov by Prisma Cloud 3.2.475",
        "Checkov by Prisma Cloud 3.2.476",
        "Checkov by Prisma Cloud 3.2.477",
        "Checkov by Prisma Cloud 3.2.478",
        "Checkov by Prisma Cloud 3.2.479",
        "Checkov by Prisma Cloud 3.2.480",
        "Checkov by Prisma Cloud 3.2.481",
        "Checkov by Prisma Cloud 3.2.482",
        "Checkov by Prisma Cloud 3.2.483",
        "Checkov by Prisma Cloud 3.2.484",
        "Checkov by Prisma Cloud 3.2.485",
        "Checkov by Prisma Cloud 3.2.486",
        "Checkov by Prisma Cloud 3.2.487",
        "Checkov by Prisma Cloud 3.2.488",
        "Checkov by Prisma Cloud 3.2.489",
        "Checkov by Prisma Cloud 3.2.490",
        "Checkov by Prisma Cloud 3.2.491",
        "Checkov by Prisma Cloud 3.2.492",
        "Checkov by Prisma Cloud 3.2.493",
        "Checkov by Prisma Cloud 3.2.494",
        "Checkov by Prisma Cloud 3.2.495",
        "Checkov by Prisma Cloud 3.2.496",
        "Checkov by Prisma Cloud 3.2.497",
        "Checkov by Prisma Cloud 3.2.498",
        "Checkov by Prisma Cloud 3.2.499",
        "Checkov by Prisma Cloud 3.2.500",
        "Checkov by Prisma Cloud 3.2.501",
        "Checkov by Prisma Cloud 3.2.502",
        "Checkov by Prisma Cloud 3.2.503",
        "Checkov by Prisma Cloud 3.2.504",
        "Checkov by Prisma Cloud 3.2.505",
        "Checkov by Prisma Cloud 3.2.506",
        "Checkov by Prisma Cloud 3.2.507",
        "Checkov by Prisma Cloud 3.2.508",
        "Checkov by Prisma Cloud 3.2.509",
        "Checkov by Prisma Cloud 3.2.510",
        "Checkov by Prisma Cloud 3.2.511",
        "Checkov by Prisma Cloud 3.2.512",
        "Checkov by Prisma Cloud 3.2.513",
        "Checkov by Prisma Cloud 3.2.514",
        "Checkov by Prisma Cloud 3.2.515",
        "Checkov by Prisma Cloud 3.2.516",
        "Checkov by Prisma Cloud 3.2.517",
        "Checkov by Prisma Cloud 3.2.518",
        "Checkov by Prisma Cloud 3.2.519",
        "Checkov by Prisma Cloud 3.2.520",
        "Checkov by Prisma Cloud 3.2.521",
        "Checkov by Prisma Cloud 3.2.522",
        "Checkov by Prisma Cloud 3.2.523",
        "Checkov by Prisma Cloud 3.2.524",
        "Checkov by Prisma Cloud 3.2.525",
        "Checkov by Prisma Cloud 3.2.526",
        "Checkov by Prisma Cloud 3.2.527",
        "Checkov by Prisma Cloud 3.2.528",
        "Checkov by Prisma Cloud 3.2.529",
        "Checkov by Prisma Cloud 3.2.530",
        "Checkov by Prisma Cloud 3.2.531"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0303",
    "datePublished": "2026-09-10T06:03:50.513Z",
    "dateReserved": "2025-11-03T20:45:01.388Z",
    "dateUpdated": "2026-09-10T06:03:50.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-0303\",\"sourceIdentifier\":\"psirt@paloaltonetworks.com\",\"published\":\"2026-09-10T07:17:02.140\",\"lastModified\":\"2026-09-10T07:17:02.140\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\"}],\"affected\":[{\"source\":\"psirt@paloaltonetworks.com\",\"affectedData\":[{\"vendor\":\"Palo Alto Networks\",\"product\":\"Checkov by Prisma Cloud\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"3.2.0\",\"lessThan\":\"3.2.532\",\"versionType\":\"custom\",\"status\":\"affected\",\"changes\":[{\"at\":\"3.2.532\",\"status\":\"unaffected\"}]}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"psirt@paloaltonetworks.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber\",\"baseScore\":2.4,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"PASSIVE\",\"vulnConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"UNREPORTED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NO\",\"Recovery\":\"USER\",\"valueDensity\":\"DIFFUSE\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"AMBER\"}}]},\"weaknesses\":[{\"source\":\"psirt@paloaltonetworks.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-829\"}]}],\"references\":[{\"url\":\"https://security.paloaltonetworks.com/CVE-2026-0303\",\"source\":\"psirt@paloaltonetworks.com\"}]}}"
  }
}

FKIE_CVE-2026-0303

Vulnerability from fkie_nvd - Published: 2026-09-10 07:17 - Updated: 2026-09-10 07:17

Severity

2.4 (Low) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Summary

References

	URL	Tags
	psirt@paloaltonetworks.com	https://security.paloaltonetworks.com/CVE-2026-0303

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.532",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.2.532",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "psirt@paloaltonetworks.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."
    }
  ],
  "id": "CVE-2026-0303",
  "lastModified": "2026-09-10T07:17:02.140",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NO",
          "Recovery": "USER",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 2.4,
          "baseSeverity": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "UNREPORTED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "AMBER",
          "subAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "HIGH",
          "subIntegrityImpact": "HIGH",
          "userInteraction": "PASSIVE",
          "valueDensity": "DIFFUSE",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "MODERATE"
        },
        "source": "psirt@paloaltonetworks.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-09-10T07:17:02.140",
  "references": [
    {
      "source": "psirt@paloaltonetworks.com",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0303"
    }
  ],
  "sourceIdentifier": "psirt@paloaltonetworks.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-829"
        }
      ],
      "source": "psirt@paloaltonetworks.com",
      "type": "Secondary"
    }
  ]
}

GHSA-MM26-4PQ5-G973

Vulnerability from github – Published: 2026-09-10 09:31 – Updated: 2026-09-10 09:31

Details

Severity

2.4 (Low)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-0303"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-829"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-10T07:17:02Z",
    "severity": "LOW"
  },
  "details": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.",
  "id": "GHSA-mm26-4pq5-g973",
  "modified": "2026-09-10T09:31:32Z",
  "published": "2026-09-10T09:31:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0303"
    },
    {
      "type": "WEB",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0303"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-0303 (GCVE-0-2026-0303)

FKIE_CVE-2026-0303

GHSA-MM26-4PQ5-G973

Tags

Sightings

Nomenclature