Vulnerability-Lookup

CVE-2026-0303 (GCVE-0-2026-0303)

Vulnerability from cvelistv5 – Published: 2026-09-10 06:03 – Updated: 2026-09-10 13:01

Title

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

Summary

A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

Severity

2.4 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 13:01 UTC

CWE

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0303	vendor-advisory

Impacted products

1 product

Vendor	Product	Version	CPE status
Palo Alto Networks	Checkov by Prisma Cloud	Affected: 3.2.0 , < 3.2.532 (custom) cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud::::::::

Date Public

2026-09-09 16:00

Credits

Michael Adedeji

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0303",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T13:01:15.631812Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T13:01:27.361Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.532",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.2.532",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be vulnerable to this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.2.532",
                  "versionStartIncluding": "3.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Michael Adedeji"
        }
      ],
      "datePublic": "2026-09-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\u0026nbsp;\u003c/p\u003e"
            }
          ],
          "value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 2.4,
            "baseSeverity": "LOW",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-829",
              "description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-10T06:03:50.513Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0303"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e3.2.0 through 3.2.531\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 3.2.532or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                Checkov by Prisma Cloud 3.2\n\n                                3.2.0 through 3.2.531\n                                Upgrade to 3.2.532or later.\n                            \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-09T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
            }
          ],
          "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
        }
      ],
      "x_affectedList": [
        "Checkov by Prisma Cloud 3.2.0",
        "Checkov by Prisma Cloud 3.2.1",
        "Checkov by Prisma Cloud 3.2.2",
        "Checkov by Prisma Cloud 3.2.3",
        "Checkov by Prisma Cloud 3.2.4",
        "Checkov by Prisma Cloud 3.2.5",
        "Checkov by Prisma Cloud 3.2.6",
        "Checkov by Prisma Cloud 3.2.7",
        "Checkov by Prisma Cloud 3.2.8",
        "Checkov by Prisma Cloud 3.2.9",
        "Checkov by Prisma Cloud 3.2.10",
        "Checkov by Prisma Cloud 3.2.11",
        "Checkov by Prisma Cloud 3.2.12",
        "Checkov by Prisma Cloud 3.2.13",
        "Checkov by Prisma Cloud 3.2.14",
        "Checkov by Prisma Cloud 3.2.15",
        "Checkov by Prisma Cloud 3.2.16",
        "Checkov by Prisma Cloud 3.2.17",
        "Checkov by Prisma Cloud 3.2.18",
        "Checkov by Prisma Cloud 3.2.19",
        "Checkov by Prisma Cloud 3.2.20",
        "Checkov by Prisma Cloud 3.2.21",
        "Checkov by Prisma Cloud 3.2.22",
        "Checkov by Prisma Cloud 3.2.23",
        "Checkov by Prisma Cloud 3.2.24",
        "Checkov by Prisma Cloud 3.2.25",
        "Checkov by Prisma Cloud 3.2.26",
        "Checkov by Prisma Cloud 3.2.27",
        "Checkov by Prisma Cloud 3.2.28",
        "Checkov by Prisma Cloud 3.2.29",
        "Checkov by Prisma Cloud 3.2.30",
        "Checkov by Prisma Cloud 3.2.31",
        "Checkov by Prisma Cloud 3.2.32",
        "Checkov by Prisma Cloud 3.2.33",
        "Checkov by Prisma Cloud 3.2.34",
        "Checkov by Prisma Cloud 3.2.35",
        "Checkov by Prisma Cloud 3.2.36",
        "Checkov by Prisma Cloud 3.2.37",
        "Checkov by Prisma Cloud 3.2.38",
        "Checkov by Prisma Cloud 3.2.39",
        "Checkov by Prisma Cloud 3.2.40",
        "Checkov by Prisma Cloud 3.2.41",
        "Checkov by Prisma Cloud 3.2.42",
        "Checkov by Prisma Cloud 3.2.43",
        "Checkov by Prisma Cloud 3.2.44",
        "Checkov by Prisma Cloud 3.2.45",
        "Checkov by Prisma Cloud 3.2.46",
        "Checkov by Prisma Cloud 3.2.47",
        "Checkov by Prisma Cloud 3.2.48",
        "Checkov by Prisma Cloud 3.2.49",
        "Checkov by Prisma Cloud 3.2.50",
        "Checkov by Prisma Cloud 3.2.51",
        "Checkov by Prisma Cloud 3.2.52",
        "Checkov by Prisma Cloud 3.2.53",
        "Checkov by Prisma Cloud 3.2.54",
        "Checkov by Prisma Cloud 3.2.55",
        "Checkov by Prisma Cloud 3.2.56",
        "Checkov by Prisma Cloud 3.2.57",
        "Checkov by Prisma Cloud 3.2.58",
        "Checkov by Prisma Cloud 3.2.59",
        "Checkov by Prisma Cloud 3.2.60",
        "Checkov by Prisma Cloud 3.2.61",
        "Checkov by Prisma Cloud 3.2.62",
        "Checkov by Prisma Cloud 3.2.63",
        "Checkov by Prisma Cloud 3.2.64",
        "Checkov by Prisma Cloud 3.2.65",
        "Checkov by Prisma Cloud 3.2.66",
        "Checkov by Prisma Cloud 3.2.67",
        "Checkov by Prisma Cloud 3.2.68",
        "Checkov by Prisma Cloud 3.2.69",
        "Checkov by Prisma Cloud 3.2.70",
        "Checkov by Prisma Cloud 3.2.71",
        "Checkov by Prisma Cloud 3.2.72",
        "Checkov by Prisma Cloud 3.2.73",
        "Checkov by Prisma Cloud 3.2.74",
        "Checkov by Prisma Cloud 3.2.75",
        "Checkov by Prisma Cloud 3.2.76",
        "Checkov by Prisma Cloud 3.2.77",
        "Checkov by Prisma Cloud 3.2.78",
        "Checkov by Prisma Cloud 3.2.79",
        "Checkov by Prisma Cloud 3.2.80",
        "Checkov by Prisma Cloud 3.2.81",
        "Checkov by Prisma Cloud 3.2.82",
        "Checkov by Prisma Cloud 3.2.83",
        "Checkov by Prisma Cloud 3.2.84",
        "Checkov by Prisma Cloud 3.2.85",
        "Checkov by Prisma Cloud 3.2.86",
        "Checkov by Prisma Cloud 3.2.87",
        "Checkov by Prisma Cloud 3.2.88",
        "Checkov by Prisma Cloud 3.2.89",
        "Checkov by Prisma Cloud 3.2.90",
        "Checkov by Prisma Cloud 3.2.91",
        "Checkov by Prisma Cloud 3.2.92",
        "Checkov by Prisma Cloud 3.2.93",
        "Checkov by Prisma Cloud 3.2.94",
        "Checkov by Prisma Cloud 3.2.95",
        "Checkov by Prisma Cloud 3.2.96",
        "Checkov by Prisma Cloud 3.2.97",
        "Checkov by Prisma Cloud 3.2.98",
        "Checkov by Prisma Cloud 3.2.99",
        "Checkov by Prisma Cloud 3.2.100",
        "Checkov by Prisma Cloud 3.2.101",
        "Checkov by Prisma Cloud 3.2.102",
        "Checkov by Prisma Cloud 3.2.103",
        "Checkov by Prisma Cloud 3.2.104",
        "Checkov by Prisma Cloud 3.2.105",
        "Checkov by Prisma Cloud 3.2.106",
        "Checkov by Prisma Cloud 3.2.107",
        "Checkov by Prisma Cloud 3.2.108",
        "Checkov by Prisma Cloud 3.2.109",
        "Checkov by Prisma Cloud 3.2.110",
        "Checkov by Prisma Cloud 3.2.111",
        "Checkov by Prisma Cloud 3.2.112",
        "Checkov by Prisma Cloud 3.2.113",
        "Checkov by Prisma Cloud 3.2.114",
        "Checkov by Prisma Cloud 3.2.115",
        "Checkov by Prisma Cloud 3.2.116",
        "Checkov by Prisma Cloud 3.2.117",
        "Checkov by Prisma Cloud 3.2.118",
        "Checkov by Prisma Cloud 3.2.119",
        "Checkov by Prisma Cloud 3.2.120",
        "Checkov by Prisma Cloud 3.2.121",
        "Checkov by Prisma Cloud 3.2.122",
        "Checkov by Prisma Cloud 3.2.123",
        "Checkov by Prisma Cloud 3.2.124",
        "Checkov by Prisma Cloud 3.2.125",
        "Checkov by Prisma Cloud 3.2.126",
        "Checkov by Prisma Cloud 3.2.127",
        "Checkov by Prisma Cloud 3.2.128",
        "Checkov by Prisma Cloud 3.2.129",
        "Checkov by Prisma Cloud 3.2.130",
        "Checkov by Prisma Cloud 3.2.131",
        "Checkov by Prisma Cloud 3.2.132",
        "Checkov by Prisma Cloud 3.2.133",
        "Checkov by Prisma Cloud 3.2.134",
        "Checkov by Prisma Cloud 3.2.135",
        "Checkov by Prisma Cloud 3.2.136",
        "Checkov by Prisma Cloud 3.2.137",
        "Checkov by Prisma Cloud 3.2.138",
        "Checkov by Prisma Cloud 3.2.139",
        "Checkov by Prisma Cloud 3.2.140",
        "Checkov by Prisma Cloud 3.2.141",
        "Checkov by Prisma Cloud 3.2.142",
        "Checkov by Prisma Cloud 3.2.143",
        "Checkov by Prisma Cloud 3.2.144",
        "Checkov by Prisma Cloud 3.2.145",
        "Checkov by Prisma Cloud 3.2.146",
        "Checkov by Prisma Cloud 3.2.147",
        "Checkov by Prisma Cloud 3.2.148",
        "Checkov by Prisma Cloud 3.2.149",
        "Checkov by Prisma Cloud 3.2.150",
        "Checkov by Prisma Cloud 3.2.151",
        "Checkov by Prisma Cloud 3.2.152",
        "Checkov by Prisma Cloud 3.2.153",
        "Checkov by Prisma Cloud 3.2.154",
        "Checkov by Prisma Cloud 3.2.155",
        "Checkov by Prisma Cloud 3.2.156",
        "Checkov by Prisma Cloud 3.2.157",
        "Checkov by Prisma Cloud 3.2.158",
        "Checkov by Prisma Cloud 3.2.159",
        "Checkov by Prisma Cloud 3.2.160",
        "Checkov by Prisma Cloud 3.2.161",
        "Checkov by Prisma Cloud 3.2.162",
        "Checkov by Prisma Cloud 3.2.163",
        "Checkov by Prisma Cloud 3.2.164",
        "Checkov by Prisma Cloud 3.2.165",
        "Checkov by Prisma Cloud 3.2.166",
        "Checkov by Prisma Cloud 3.2.167",
        "Checkov by Prisma Cloud 3.2.168",
        "Checkov by Prisma Cloud 3.2.169",
        "Checkov by Prisma Cloud 3.2.170",
        "Checkov by Prisma Cloud 3.2.171",
        "Checkov by Prisma Cloud 3.2.172",
        "Checkov by Prisma Cloud 3.2.173",
        "Checkov by Prisma Cloud 3.2.174",
        "Checkov by Prisma Cloud 3.2.175",
        "Checkov by Prisma Cloud 3.2.176",
        "Checkov by Prisma Cloud 3.2.177",
        "Checkov by Prisma Cloud 3.2.178",
        "Checkov by Prisma Cloud 3.2.179",
        "Checkov by Prisma Cloud 3.2.180",
        "Checkov by Prisma Cloud 3.2.181",
        "Checkov by Prisma Cloud 3.2.182",
        "Checkov by Prisma Cloud 3.2.183",
        "Checkov by Prisma Cloud 3.2.184",
        "Checkov by Prisma Cloud 3.2.185",
        "Checkov by Prisma Cloud 3.2.186",
        "Checkov by Prisma Cloud 3.2.187",
        "Checkov by Prisma Cloud 3.2.188",
        "Checkov by Prisma Cloud 3.2.189",
        "Checkov by Prisma Cloud 3.2.190",
        "Checkov by Prisma Cloud 3.2.191",
        "Checkov by Prisma Cloud 3.2.192",
        "Checkov by Prisma Cloud 3.2.193",
        "Checkov by Prisma Cloud 3.2.194",
        "Checkov by Prisma Cloud 3.2.195",
        "Checkov by Prisma Cloud 3.2.196",
        "Checkov by Prisma Cloud 3.2.197",
        "Checkov by Prisma Cloud 3.2.198",
        "Checkov by Prisma Cloud 3.2.199",
        "Checkov by Prisma Cloud 3.2.200",
        "Checkov by Prisma Cloud 3.2.201",
        "Checkov by Prisma Cloud 3.2.202",
        "Checkov by Prisma Cloud 3.2.203",
        "Checkov by Prisma Cloud 3.2.204",
        "Checkov by Prisma Cloud 3.2.205",
        "Checkov by Prisma Cloud 3.2.206",
        "Checkov by Prisma Cloud 3.2.207",
        "Checkov by Prisma Cloud 3.2.208",
        "Checkov by Prisma Cloud 3.2.209",
        "Checkov by Prisma Cloud 3.2.210",
        "Checkov by Prisma Cloud 3.2.211",
        "Checkov by Prisma Cloud 3.2.212",
        "Checkov by Prisma Cloud 3.2.213",
        "Checkov by Prisma Cloud 3.2.214",
        "Checkov by Prisma Cloud 3.2.215",
        "Checkov by Prisma Cloud 3.2.216",
        "Checkov by Prisma Cloud 3.2.217",
        "Checkov by Prisma Cloud 3.2.218",
        "Checkov by Prisma Cloud 3.2.219",
        "Checkov by Prisma Cloud 3.2.220",
        "Checkov by Prisma Cloud 3.2.221",
        "Checkov by Prisma Cloud 3.2.222",
        "Checkov by Prisma Cloud 3.2.223",
        "Checkov by Prisma Cloud 3.2.224",
        "Checkov by Prisma Cloud 3.2.225",
        "Checkov by Prisma Cloud 3.2.226",
        "Checkov by Prisma Cloud 3.2.227",
        "Checkov by Prisma Cloud 3.2.228",
        "Checkov by Prisma Cloud 3.2.229",
        "Checkov by Prisma Cloud 3.2.230",
        "Checkov by Prisma Cloud 3.2.231",
        "Checkov by Prisma Cloud 3.2.232",
        "Checkov by Prisma Cloud 3.2.233",
        "Checkov by Prisma Cloud 3.2.234",
        "Checkov by Prisma Cloud 3.2.235",
        "Checkov by Prisma Cloud 3.2.236",
        "Checkov by Prisma Cloud 3.2.237",
        "Checkov by Prisma Cloud 3.2.238",
        "Checkov by Prisma Cloud 3.2.239",
        "Checkov by Prisma Cloud 3.2.240",
        "Checkov by Prisma Cloud 3.2.241",
        "Checkov by Prisma Cloud 3.2.242",
        "Checkov by Prisma Cloud 3.2.243",
        "Checkov by Prisma Cloud 3.2.244",
        "Checkov by Prisma Cloud 3.2.245",
        "Checkov by Prisma Cloud 3.2.246",
        "Checkov by Prisma Cloud 3.2.247",
        "Checkov by Prisma Cloud 3.2.248",
        "Checkov by Prisma Cloud 3.2.249",
        "Checkov by Prisma Cloud 3.2.250",
        "Checkov by Prisma Cloud 3.2.251",
        "Checkov by Prisma Cloud 3.2.252",
        "Checkov by Prisma Cloud 3.2.253",
        "Checkov by Prisma Cloud 3.2.254",
        "Checkov by Prisma Cloud 3.2.255",
        "Checkov by Prisma Cloud 3.2.256",
        "Checkov by Prisma Cloud 3.2.257",
        "Checkov by Prisma Cloud 3.2.258",
        "Checkov by Prisma Cloud 3.2.259",
        "Checkov by Prisma Cloud 3.2.260",
        "Checkov by Prisma Cloud 3.2.261",
        "Checkov by Prisma Cloud 3.2.262",
        "Checkov by Prisma Cloud 3.2.263",
        "Checkov by Prisma Cloud 3.2.264",
        "Checkov by Prisma Cloud 3.2.265",
        "Checkov by Prisma Cloud 3.2.266",
        "Checkov by Prisma Cloud 3.2.267",
        "Checkov by Prisma Cloud 3.2.268",
        "Checkov by Prisma Cloud 3.2.269",
        "Checkov by Prisma Cloud 3.2.270",
        "Checkov by Prisma Cloud 3.2.271",
        "Checkov by Prisma Cloud 3.2.272",
        "Checkov by Prisma Cloud 3.2.273",
        "Checkov by Prisma Cloud 3.2.274",
        "Checkov by Prisma Cloud 3.2.275",
        "Checkov by Prisma Cloud 3.2.276",
        "Checkov by Prisma Cloud 3.2.277",
        "Checkov by Prisma Cloud 3.2.278",
        "Checkov by Prisma Cloud 3.2.279",
        "Checkov by Prisma Cloud 3.2.280",
        "Checkov by Prisma Cloud 3.2.281",
        "Checkov by Prisma Cloud 3.2.282",
        "Checkov by Prisma Cloud 3.2.283",
        "Checkov by Prisma Cloud 3.2.284",
        "Checkov by Prisma Cloud 3.2.285",
        "Checkov by Prisma Cloud 3.2.286",
        "Checkov by Prisma Cloud 3.2.287",
        "Checkov by Prisma Cloud 3.2.288",
        "Checkov by Prisma Cloud 3.2.289",
        "Checkov by Prisma Cloud 3.2.290",
        "Checkov by Prisma Cloud 3.2.291",
        "Checkov by Prisma Cloud 3.2.292",
        "Checkov by Prisma Cloud 3.2.293",
        "Checkov by Prisma Cloud 3.2.294",
        "Checkov by Prisma Cloud 3.2.295",
        "Checkov by Prisma Cloud 3.2.296",
        "Checkov by Prisma Cloud 3.2.297",
        "Checkov by Prisma Cloud 3.2.298",
        "Checkov by Prisma Cloud 3.2.299",
        "Checkov by Prisma Cloud 3.2.300",
        "Checkov by Prisma Cloud 3.2.301",
        "Checkov by Prisma Cloud 3.2.302",
        "Checkov by Prisma Cloud 3.2.303",
        "Checkov by Prisma Cloud 3.2.304",
        "Checkov by Prisma Cloud 3.2.305",
        "Checkov by Prisma Cloud 3.2.306",
        "Checkov by Prisma Cloud 3.2.307",
        "Checkov by Prisma Cloud 3.2.308",
        "Checkov by Prisma Cloud 3.2.309",
        "Checkov by Prisma Cloud 3.2.310",
        "Checkov by Prisma Cloud 3.2.311",
        "Checkov by Prisma Cloud 3.2.312",
        "Checkov by Prisma Cloud 3.2.313",
        "Checkov by Prisma Cloud 3.2.314",
        "Checkov by Prisma Cloud 3.2.315",
        "Checkov by Prisma Cloud 3.2.316",
        "Checkov by Prisma Cloud 3.2.317",
        "Checkov by Prisma Cloud 3.2.318",
        "Checkov by Prisma Cloud 3.2.319",
        "Checkov by Prisma Cloud 3.2.320",
        "Checkov by Prisma Cloud 3.2.321",
        "Checkov by Prisma Cloud 3.2.322",
        "Checkov by Prisma Cloud 3.2.323",
        "Checkov by Prisma Cloud 3.2.324",
        "Checkov by Prisma Cloud 3.2.325",
        "Checkov by Prisma Cloud 3.2.326",
        "Checkov by Prisma Cloud 3.2.327",
        "Checkov by Prisma Cloud 3.2.328",
        "Checkov by Prisma Cloud 3.2.329",
        "Checkov by Prisma Cloud 3.2.330",
        "Checkov by Prisma Cloud 3.2.331",
        "Checkov by Prisma Cloud 3.2.332",
        "Checkov by Prisma Cloud 3.2.333",
        "Checkov by Prisma Cloud 3.2.334",
        "Checkov by Prisma Cloud 3.2.335",
        "Checkov by Prisma Cloud 3.2.336",
        "Checkov by Prisma Cloud 3.2.337",
        "Checkov by Prisma Cloud 3.2.338",
        "Checkov by Prisma Cloud 3.2.339",
        "Checkov by Prisma Cloud 3.2.340",
        "Checkov by Prisma Cloud 3.2.341",
        "Checkov by Prisma Cloud 3.2.342",
        "Checkov by Prisma Cloud 3.2.343",
        "Checkov by Prisma Cloud 3.2.344",
        "Checkov by Prisma Cloud 3.2.345",
        "Checkov by Prisma Cloud 3.2.346",
        "Checkov by Prisma Cloud 3.2.347",
        "Checkov by Prisma Cloud 3.2.348",
        "Checkov by Prisma Cloud 3.2.349",
        "Checkov by Prisma Cloud 3.2.350",
        "Checkov by Prisma Cloud 3.2.351",
        "Checkov by Prisma Cloud 3.2.352",
        "Checkov by Prisma Cloud 3.2.353",
        "Checkov by Prisma Cloud 3.2.354",
        "Checkov by Prisma Cloud 3.2.355",
        "Checkov by Prisma Cloud 3.2.356",
        "Checkov by Prisma Cloud 3.2.357",
        "Checkov by Prisma Cloud 3.2.358",
        "Checkov by Prisma Cloud 3.2.359",
        "Checkov by Prisma Cloud 3.2.360",
        "Checkov by Prisma Cloud 3.2.361",
        "Checkov by Prisma Cloud 3.2.362",
        "Checkov by Prisma Cloud 3.2.363",
        "Checkov by Prisma Cloud 3.2.364",
        "Checkov by Prisma Cloud 3.2.365",
        "Checkov by Prisma Cloud 3.2.366",
        "Checkov by Prisma Cloud 3.2.367",
        "Checkov by Prisma Cloud 3.2.368",
        "Checkov by Prisma Cloud 3.2.369",
        "Checkov by Prisma Cloud 3.2.370",
        "Checkov by Prisma Cloud 3.2.371",
        "Checkov by Prisma Cloud 3.2.372",
        "Checkov by Prisma Cloud 3.2.373",
        "Checkov by Prisma Cloud 3.2.374",
        "Checkov by Prisma Cloud 3.2.375",
        "Checkov by Prisma Cloud 3.2.376",
        "Checkov by Prisma Cloud 3.2.377",
        "Checkov by Prisma Cloud 3.2.378",
        "Checkov by Prisma Cloud 3.2.379",
        "Checkov by Prisma Cloud 3.2.380",
        "Checkov by Prisma Cloud 3.2.381",
        "Checkov by Prisma Cloud 3.2.382",
        "Checkov by Prisma Cloud 3.2.383",
        "Checkov by Prisma Cloud 3.2.384",
        "Checkov by Prisma Cloud 3.2.385",
        "Checkov by Prisma Cloud 3.2.386",
        "Checkov by Prisma Cloud 3.2.387",
        "Checkov by Prisma Cloud 3.2.388",
        "Checkov by Prisma Cloud 3.2.389",
        "Checkov by Prisma Cloud 3.2.390",
        "Checkov by Prisma Cloud 3.2.391",
        "Checkov by Prisma Cloud 3.2.392",
        "Checkov by Prisma Cloud 3.2.393",
        "Checkov by Prisma Cloud 3.2.394",
        "Checkov by Prisma Cloud 3.2.395",
        "Checkov by Prisma Cloud 3.2.396",
        "Checkov by Prisma Cloud 3.2.397",
        "Checkov by Prisma Cloud 3.2.398",
        "Checkov by Prisma Cloud 3.2.399",
        "Checkov by Prisma Cloud 3.2.400",
        "Checkov by Prisma Cloud 3.2.401",
        "Checkov by Prisma Cloud 3.2.402",
        "Checkov by Prisma Cloud 3.2.403",
        "Checkov by Prisma Cloud 3.2.404",
        "Checkov by Prisma Cloud 3.2.405",
        "Checkov by Prisma Cloud 3.2.406",
        "Checkov by Prisma Cloud 3.2.407",
        "Checkov by Prisma Cloud 3.2.408",
        "Checkov by Prisma Cloud 3.2.409",
        "Checkov by Prisma Cloud 3.2.410",
        "Checkov by Prisma Cloud 3.2.411",
        "Checkov by Prisma Cloud 3.2.412",
        "Checkov by Prisma Cloud 3.2.413",
        "Checkov by Prisma Cloud 3.2.414",
        "Checkov by Prisma Cloud 3.2.415",
        "Checkov by Prisma Cloud 3.2.416",
        "Checkov by Prisma Cloud 3.2.417",
        "Checkov by Prisma Cloud 3.2.418",
        "Checkov by Prisma Cloud 3.2.419",
        "Checkov by Prisma Cloud 3.2.420",
        "Checkov by Prisma Cloud 3.2.421",
        "Checkov by Prisma Cloud 3.2.422",
        "Checkov by Prisma Cloud 3.2.423",
        "Checkov by Prisma Cloud 3.2.424",
        "Checkov by Prisma Cloud 3.2.425",
        "Checkov by Prisma Cloud 3.2.426",
        "Checkov by Prisma Cloud 3.2.427",
        "Checkov by Prisma Cloud 3.2.428",
        "Checkov by Prisma Cloud 3.2.429",
        "Checkov by Prisma Cloud 3.2.430",
        "Checkov by Prisma Cloud 3.2.431",
        "Checkov by Prisma Cloud 3.2.432",
        "Checkov by Prisma Cloud 3.2.433",
        "Checkov by Prisma Cloud 3.2.434",
        "Checkov by Prisma Cloud 3.2.435",
        "Checkov by Prisma Cloud 3.2.436",
        "Checkov by Prisma Cloud 3.2.437",
        "Checkov by Prisma Cloud 3.2.438",
        "Checkov by Prisma Cloud 3.2.439",
        "Checkov by Prisma Cloud 3.2.440",
        "Checkov by Prisma Cloud 3.2.441",
        "Checkov by Prisma Cloud 3.2.442",
        "Checkov by Prisma Cloud 3.2.443",
        "Checkov by Prisma Cloud 3.2.444",
        "Checkov by Prisma Cloud 3.2.445",
        "Checkov by Prisma Cloud 3.2.446",
        "Checkov by Prisma Cloud 3.2.447",
        "Checkov by Prisma Cloud 3.2.448",
        "Checkov by Prisma Cloud 3.2.449",
        "Checkov by Prisma Cloud 3.2.450",
        "Checkov by Prisma Cloud 3.2.451",
        "Checkov by Prisma Cloud 3.2.452",
        "Checkov by Prisma Cloud 3.2.453",
        "Checkov by Prisma Cloud 3.2.454",
        "Checkov by Prisma Cloud 3.2.455",
        "Checkov by Prisma Cloud 3.2.456",
        "Checkov by Prisma Cloud 3.2.457",
        "Checkov by Prisma Cloud 3.2.458",
        "Checkov by Prisma Cloud 3.2.459",
        "Checkov by Prisma Cloud 3.2.460",
        "Checkov by Prisma Cloud 3.2.461",
        "Checkov by Prisma Cloud 3.2.462",
        "Checkov by Prisma Cloud 3.2.463",
        "Checkov by Prisma Cloud 3.2.464",
        "Checkov by Prisma Cloud 3.2.465",
        "Checkov by Prisma Cloud 3.2.466",
        "Checkov by Prisma Cloud 3.2.467",
        "Checkov by Prisma Cloud 3.2.468",
        "Checkov by Prisma Cloud 3.2.469",
        "Checkov by Prisma Cloud 3.2.470",
        "Checkov by Prisma Cloud 3.2.471",
        "Checkov by Prisma Cloud 3.2.472",
        "Checkov by Prisma Cloud 3.2.473",
        "Checkov by Prisma Cloud 3.2.474",
        "Checkov by Prisma Cloud 3.2.475",
        "Checkov by Prisma Cloud 3.2.476",
        "Checkov by Prisma Cloud 3.2.477",
        "Checkov by Prisma Cloud 3.2.478",
        "Checkov by Prisma Cloud 3.2.479",
        "Checkov by Prisma Cloud 3.2.480",
        "Checkov by Prisma Cloud 3.2.481",
        "Checkov by Prisma Cloud 3.2.482",
        "Checkov by Prisma Cloud 3.2.483",
        "Checkov by Prisma Cloud 3.2.484",
        "Checkov by Prisma Cloud 3.2.485",
        "Checkov by Prisma Cloud 3.2.486",
        "Checkov by Prisma Cloud 3.2.487",
        "Checkov by Prisma Cloud 3.2.488",
        "Checkov by Prisma Cloud 3.2.489",
        "Checkov by Prisma Cloud 3.2.490",
        "Checkov by Prisma Cloud 3.2.491",
        "Checkov by Prisma Cloud 3.2.492",
        "Checkov by Prisma Cloud 3.2.493",
        "Checkov by Prisma Cloud 3.2.494",
        "Checkov by Prisma Cloud 3.2.495",
        "Checkov by Prisma Cloud 3.2.496",
        "Checkov by Prisma Cloud 3.2.497",
        "Checkov by Prisma Cloud 3.2.498",
        "Checkov by Prisma Cloud 3.2.499",
        "Checkov by Prisma Cloud 3.2.500",
        "Checkov by Prisma Cloud 3.2.501",
        "Checkov by Prisma Cloud 3.2.502",
        "Checkov by Prisma Cloud 3.2.503",
        "Checkov by Prisma Cloud 3.2.504",
        "Checkov by Prisma Cloud 3.2.505",
        "Checkov by Prisma Cloud 3.2.506",
        "Checkov by Prisma Cloud 3.2.507",
        "Checkov by Prisma Cloud 3.2.508",
        "Checkov by Prisma Cloud 3.2.509",
        "Checkov by Prisma Cloud 3.2.510",
        "Checkov by Prisma Cloud 3.2.511",
        "Checkov by Prisma Cloud 3.2.512",
        "Checkov by Prisma Cloud 3.2.513",
        "Checkov by Prisma Cloud 3.2.514",
        "Checkov by Prisma Cloud 3.2.515",
        "Checkov by Prisma Cloud 3.2.516",
        "Checkov by Prisma Cloud 3.2.517",
        "Checkov by Prisma Cloud 3.2.518",
        "Checkov by Prisma Cloud 3.2.519",
        "Checkov by Prisma Cloud 3.2.520",
        "Checkov by Prisma Cloud 3.2.521",
        "Checkov by Prisma Cloud 3.2.522",
        "Checkov by Prisma Cloud 3.2.523",
        "Checkov by Prisma Cloud 3.2.524",
        "Checkov by Prisma Cloud 3.2.525",
        "Checkov by Prisma Cloud 3.2.526",
        "Checkov by Prisma Cloud 3.2.527",
        "Checkov by Prisma Cloud 3.2.528",
        "Checkov by Prisma Cloud 3.2.529",
        "Checkov by Prisma Cloud 3.2.530",
        "Checkov by Prisma Cloud 3.2.531"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0303",
    "datePublished": "2026-09-10T06:03:50.513Z",
    "dateReserved": "2025-11-03T20:45:01.388Z",
    "dateUpdated": "2026-09-10T13:01:27.361Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-0303",
      "date": "2026-09-11",
      "epss": "0.00128",
      "percentile": "0.02815"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-0303\",\"sourceIdentifier\":\"psirt@paloaltonetworks.com\",\"published\":\"2026-09-10T07:17:02.140\",\"lastModified\":\"2026-09-10T14:50:07.813\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\"}],\"affected\":[{\"source\":\"psirt@paloaltonetworks.com\",\"affectedData\":[{\"vendor\":\"Palo Alto Networks\",\"product\":\"Checkov by Prisma Cloud\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"3.2.0\",\"lessThan\":\"3.2.532\",\"versionType\":\"custom\",\"status\":\"affected\",\"changes\":[{\"at\":\"3.2.532\",\"status\":\"unaffected\"}]}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"psirt@paloaltonetworks.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber\",\"baseScore\":2.4,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"PASSIVE\",\"vulnConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"exploitMaturity\":\"UNREPORTED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NO\",\"Recovery\":\"USER\",\"valueDensity\":\"DIFFUSE\",\"vulnerabilityResponseEffort\":\"MODERATE\",\"providerUrgency\":\"AMBER\"}}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-09-10T13:01:15.631812Z\",\"id\":\"CVE-2026-0303\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@paloaltonetworks.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-829\"}]}],\"references\":[{\"url\":\"https://security.paloaltonetworks.com/CVE-2026-0303\",\"source\":\"psirt@paloaltonetworks.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-0303\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-10T13:01:15.631812Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-10T13:01:23.286Z\"}}], \"cna\": {\"title\": \"Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Michael Adedeji\"}], \"impacts\": [{\"capecId\": \"CAPEC-248\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-248 Command Injection\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"USER\", \"baseScore\": 2.4, \"Automatable\": \"NO\", \"attackVector\": \"LOCAL\", \"baseSeverity\": \"LOW\", \"valueDensity\": \"DIFFUSE\", \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber\", \"exploitMaturity\": \"UNREPORTED\", \"providerUrgency\": \"AMBER\", \"userInteraction\": \"PASSIVE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"HIGH\", \"vulnIntegrityImpact\": \"LOW\", \"subAvailabilityImpact\": \"HIGH\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"HIGH\", \"vulnConfidentialityImpact\": \"NONE\", \"vulnerabilityResponseEffort\": \"MODERATE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"If the user scans infrastructure as code (IaC) files from untrusted sources.\"}]}], \"affected\": [{\"vendor\": \"Palo Alto Networks\", \"product\": \"Checkov by Prisma Cloud\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"3.2.532\", \"status\": \"unaffected\"}], \"version\": \"3.2.0\", \"lessThan\": \"3.2.532\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"Palo Alto Networks is not aware of any malicious exploitation of this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;\", \"base64\": false}]}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-09-09T16:00:00.000Z\", \"value\": \"Initial Publication\"}], \"solutions\": [{\"lang\": \"eng\", \"value\": \"Version\\nMinor Version\\nSuggested Solution\\n\\n                                Checkov by Prisma Cloud 3.2\\n\\n                                3.2.0 through 3.2.531\\n                                Upgrade to 3.2.532or later.\\n                            \\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\\n                                \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\\n                                \u003ctd\u003e3.2.0 through 3.2.531\u003c/td\u003e\\n                                \u003ctd\u003eUpgrade to 3.2.532or later.\u003c/td\u003e\\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.\", \"base64\": false}]}], \"datePublic\": \"2026-09-09T16:00:00.000Z\", \"references\": [{\"url\": \"https://security.paloaltonetworks.com/CVE-2026-0303\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"eng\", \"value\": \"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A code execution vulnerability in Palo Alto Networks Checkov by Prisma\\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eA code execution vulnerability in Palo Alto Networks Checkov by Prisma\\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\u0026nbsp;\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-829\", \"description\": \"CWE-829 Inclusion of Functionality from Untrusted Control Sphere\"}]}], \"configurations\": [{\"lang\": \"eng\", \"value\": \"No special configuration is required to be vulnerable to this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e\", \"base64\": false}]}], \"x_affectedList\": [\"Checkov by Prisma Cloud 3.2.0\", \"Checkov by Prisma Cloud 3.2.1\", \"Checkov by Prisma Cloud 3.2.2\", \"Checkov by Prisma Cloud 3.2.3\", \"Checkov by Prisma Cloud 3.2.4\", \"Checkov by Prisma Cloud 3.2.5\", \"Checkov by Prisma Cloud 3.2.6\", \"Checkov by Prisma Cloud 3.2.7\", \"Checkov by Prisma Cloud 3.2.8\", \"Checkov by Prisma Cloud 3.2.9\", \"Checkov by Prisma Cloud 3.2.10\", \"Checkov by Prisma Cloud 3.2.11\", \"Checkov by Prisma Cloud 3.2.12\", \"Checkov by Prisma Cloud 3.2.13\", \"Checkov by Prisma Cloud 3.2.14\", \"Checkov by Prisma Cloud 3.2.15\", \"Checkov by Prisma Cloud 3.2.16\", \"Checkov by Prisma Cloud 3.2.17\", \"Checkov by Prisma Cloud 3.2.18\", \"Checkov by Prisma Cloud 3.2.19\", \"Checkov by Prisma Cloud 3.2.20\", \"Checkov by Prisma Cloud 3.2.21\", \"Checkov by Prisma Cloud 3.2.22\", \"Checkov by Prisma Cloud 3.2.23\", \"Checkov by Prisma Cloud 3.2.24\", \"Checkov by Prisma Cloud 3.2.25\", \"Checkov by Prisma Cloud 3.2.26\", \"Checkov by Prisma Cloud 3.2.27\", \"Checkov by Prisma Cloud 3.2.28\", \"Checkov by Prisma Cloud 3.2.29\", \"Checkov by Prisma Cloud 3.2.30\", \"Checkov by Prisma Cloud 3.2.31\", \"Checkov by Prisma Cloud 3.2.32\", \"Checkov by Prisma Cloud 3.2.33\", \"Checkov by Prisma Cloud 3.2.34\", \"Checkov by Prisma Cloud 3.2.35\", \"Checkov by Prisma Cloud 3.2.36\", \"Checkov by Prisma Cloud 3.2.37\", \"Checkov by Prisma Cloud 3.2.38\", \"Checkov by Prisma Cloud 3.2.39\", \"Checkov by Prisma Cloud 3.2.40\", \"Checkov by Prisma Cloud 3.2.41\", \"Checkov by Prisma Cloud 3.2.42\", \"Checkov by Prisma Cloud 3.2.43\", \"Checkov by Prisma Cloud 3.2.44\", \"Checkov by Prisma Cloud 3.2.45\", \"Checkov by Prisma Cloud 3.2.46\", \"Checkov by Prisma Cloud 3.2.47\", \"Checkov by Prisma Cloud 3.2.48\", \"Checkov by Prisma Cloud 3.2.49\", \"Checkov by Prisma Cloud 3.2.50\", \"Checkov by Prisma Cloud 3.2.51\", \"Checkov by Prisma Cloud 3.2.52\", \"Checkov by Prisma Cloud 3.2.53\", \"Checkov by Prisma Cloud 3.2.54\", \"Checkov by Prisma Cloud 3.2.55\", \"Checkov by Prisma Cloud 3.2.56\", \"Checkov by Prisma Cloud 3.2.57\", \"Checkov by Prisma Cloud 3.2.58\", \"Checkov by Prisma Cloud 3.2.59\", \"Checkov by Prisma Cloud 3.2.60\", \"Checkov by Prisma Cloud 3.2.61\", \"Checkov by Prisma Cloud 3.2.62\", \"Checkov by Prisma Cloud 3.2.63\", \"Checkov by Prisma Cloud 3.2.64\", \"Checkov by Prisma Cloud 3.2.65\", \"Checkov by Prisma Cloud 3.2.66\", \"Checkov by Prisma Cloud 3.2.67\", \"Checkov by Prisma Cloud 3.2.68\", \"Checkov by Prisma Cloud 3.2.69\", \"Checkov by Prisma Cloud 3.2.70\", \"Checkov by Prisma Cloud 3.2.71\", \"Checkov by Prisma Cloud 3.2.72\", \"Checkov by Prisma Cloud 3.2.73\", \"Checkov by Prisma Cloud 3.2.74\", \"Checkov by Prisma Cloud 3.2.75\", \"Checkov by Prisma Cloud 3.2.76\", \"Checkov by Prisma Cloud 3.2.77\", \"Checkov by Prisma Cloud 3.2.78\", \"Checkov by Prisma Cloud 3.2.79\", \"Checkov by Prisma Cloud 3.2.80\", \"Checkov by Prisma Cloud 3.2.81\", \"Checkov by Prisma Cloud 3.2.82\", \"Checkov by Prisma Cloud 3.2.83\", \"Checkov by Prisma Cloud 3.2.84\", \"Checkov by Prisma Cloud 3.2.85\", \"Checkov by Prisma Cloud 3.2.86\", \"Checkov by Prisma Cloud 3.2.87\", \"Checkov by Prisma Cloud 3.2.88\", \"Checkov by Prisma Cloud 3.2.89\", \"Checkov by Prisma Cloud 3.2.90\", \"Checkov by Prisma Cloud 3.2.91\", \"Checkov by Prisma Cloud 3.2.92\", \"Checkov by Prisma Cloud 3.2.93\", \"Checkov by Prisma Cloud 3.2.94\", \"Checkov by Prisma Cloud 3.2.95\", \"Checkov by Prisma Cloud 3.2.96\", \"Checkov by Prisma Cloud 3.2.97\", \"Checkov by Prisma Cloud 3.2.98\", \"Checkov by Prisma Cloud 3.2.99\", \"Checkov by Prisma Cloud 3.2.100\", \"Checkov by Prisma Cloud 3.2.101\", \"Checkov by Prisma Cloud 3.2.102\", \"Checkov by Prisma Cloud 3.2.103\", \"Checkov by Prisma Cloud 3.2.104\", \"Checkov by Prisma Cloud 3.2.105\", \"Checkov by Prisma Cloud 3.2.106\", \"Checkov by Prisma Cloud 3.2.107\", \"Checkov by Prisma Cloud 3.2.108\", \"Checkov by Prisma Cloud 3.2.109\", \"Checkov by Prisma Cloud 3.2.110\", \"Checkov by Prisma Cloud 3.2.111\", \"Checkov by Prisma Cloud 3.2.112\", \"Checkov by Prisma Cloud 3.2.113\", \"Checkov by Prisma Cloud 3.2.114\", \"Checkov by Prisma Cloud 3.2.115\", \"Checkov by Prisma Cloud 3.2.116\", \"Checkov by Prisma Cloud 3.2.117\", \"Checkov by Prisma Cloud 3.2.118\", \"Checkov by Prisma Cloud 3.2.119\", \"Checkov by Prisma Cloud 3.2.120\", \"Checkov by Prisma Cloud 3.2.121\", \"Checkov by Prisma Cloud 3.2.122\", \"Checkov by Prisma Cloud 3.2.123\", \"Checkov by Prisma Cloud 3.2.124\", \"Checkov by Prisma Cloud 3.2.125\", \"Checkov by Prisma Cloud 3.2.126\", \"Checkov by Prisma Cloud 3.2.127\", \"Checkov by Prisma Cloud 3.2.128\", \"Checkov by Prisma Cloud 3.2.129\", \"Checkov by Prisma Cloud 3.2.130\", \"Checkov by Prisma Cloud 3.2.131\", \"Checkov by Prisma Cloud 3.2.132\", \"Checkov by Prisma Cloud 3.2.133\", \"Checkov by Prisma Cloud 3.2.134\", \"Checkov by Prisma Cloud 3.2.135\", \"Checkov by Prisma Cloud 3.2.136\", \"Checkov by Prisma Cloud 3.2.137\", \"Checkov by Prisma Cloud 3.2.138\", \"Checkov by Prisma Cloud 3.2.139\", \"Checkov by Prisma Cloud 3.2.140\", \"Checkov by Prisma Cloud 3.2.141\", \"Checkov by Prisma Cloud 3.2.142\", \"Checkov by Prisma Cloud 3.2.143\", \"Checkov by Prisma Cloud 3.2.144\", \"Checkov by Prisma Cloud 3.2.145\", \"Checkov by Prisma Cloud 3.2.146\", \"Checkov by Prisma Cloud 3.2.147\", \"Checkov by Prisma Cloud 3.2.148\", \"Checkov by Prisma Cloud 3.2.149\", \"Checkov by Prisma Cloud 3.2.150\", \"Checkov by Prisma Cloud 3.2.151\", \"Checkov by Prisma Cloud 3.2.152\", \"Checkov by Prisma Cloud 3.2.153\", \"Checkov by Prisma Cloud 3.2.154\", \"Checkov by Prisma Cloud 3.2.155\", \"Checkov by Prisma Cloud 3.2.156\", \"Checkov by Prisma Cloud 3.2.157\", \"Checkov by Prisma Cloud 3.2.158\", \"Checkov by Prisma Cloud 3.2.159\", \"Checkov by Prisma Cloud 3.2.160\", \"Checkov by Prisma Cloud 3.2.161\", \"Checkov by Prisma Cloud 3.2.162\", \"Checkov by Prisma Cloud 3.2.163\", \"Checkov by Prisma Cloud 3.2.164\", \"Checkov by Prisma Cloud 3.2.165\", \"Checkov by Prisma Cloud 3.2.166\", \"Checkov by Prisma Cloud 3.2.167\", \"Checkov by Prisma Cloud 3.2.168\", \"Checkov by Prisma Cloud 3.2.169\", \"Checkov by Prisma Cloud 3.2.170\", \"Checkov by Prisma Cloud 3.2.171\", \"Checkov by Prisma Cloud 3.2.172\", \"Checkov by Prisma Cloud 3.2.173\", \"Checkov by Prisma Cloud 3.2.174\", \"Checkov by Prisma Cloud 3.2.175\", \"Checkov by Prisma Cloud 3.2.176\", \"Checkov by Prisma Cloud 3.2.177\", \"Checkov by Prisma Cloud 3.2.178\", \"Checkov by Prisma Cloud 3.2.179\", \"Checkov by Prisma Cloud 3.2.180\", \"Checkov by Prisma Cloud 3.2.181\", \"Checkov by Prisma Cloud 3.2.182\", \"Checkov by Prisma Cloud 3.2.183\", \"Checkov by Prisma Cloud 3.2.184\", \"Checkov by Prisma Cloud 3.2.185\", \"Checkov by Prisma Cloud 3.2.186\", \"Checkov by Prisma Cloud 3.2.187\", \"Checkov by Prisma Cloud 3.2.188\", \"Checkov by Prisma Cloud 3.2.189\", \"Checkov by Prisma Cloud 3.2.190\", \"Checkov by Prisma Cloud 3.2.191\", \"Checkov by Prisma Cloud 3.2.192\", \"Checkov by Prisma Cloud 3.2.193\", \"Checkov by Prisma Cloud 3.2.194\", \"Checkov by Prisma Cloud 3.2.195\", \"Checkov by Prisma Cloud 3.2.196\", \"Checkov by Prisma Cloud 3.2.197\", \"Checkov by Prisma Cloud 3.2.198\", \"Checkov by Prisma Cloud 3.2.199\", \"Checkov by Prisma Cloud 3.2.200\", \"Checkov by Prisma Cloud 3.2.201\", \"Checkov by Prisma Cloud 3.2.202\", \"Checkov by Prisma Cloud 3.2.203\", \"Checkov by Prisma Cloud 3.2.204\", \"Checkov by Prisma Cloud 3.2.205\", \"Checkov by Prisma Cloud 3.2.206\", \"Checkov by Prisma Cloud 3.2.207\", \"Checkov by Prisma Cloud 3.2.208\", \"Checkov by Prisma Cloud 3.2.209\", \"Checkov by Prisma Cloud 3.2.210\", \"Checkov by Prisma Cloud 3.2.211\", \"Checkov by Prisma Cloud 3.2.212\", \"Checkov by Prisma Cloud 3.2.213\", \"Checkov by Prisma Cloud 3.2.214\", \"Checkov by Prisma Cloud 3.2.215\", \"Checkov by Prisma Cloud 3.2.216\", \"Checkov by Prisma Cloud 3.2.217\", \"Checkov by Prisma Cloud 3.2.218\", \"Checkov by Prisma Cloud 3.2.219\", \"Checkov by Prisma Cloud 3.2.220\", \"Checkov by Prisma Cloud 3.2.221\", \"Checkov by Prisma Cloud 3.2.222\", \"Checkov by Prisma Cloud 3.2.223\", \"Checkov by Prisma Cloud 3.2.224\", \"Checkov by Prisma Cloud 3.2.225\", \"Checkov by Prisma Cloud 3.2.226\", \"Checkov by Prisma Cloud 3.2.227\", \"Checkov by Prisma Cloud 3.2.228\", \"Checkov by Prisma Cloud 3.2.229\", \"Checkov by Prisma Cloud 3.2.230\", \"Checkov by Prisma Cloud 3.2.231\", \"Checkov by Prisma Cloud 3.2.232\", \"Checkov by Prisma Cloud 3.2.233\", \"Checkov by Prisma Cloud 3.2.234\", \"Checkov by Prisma Cloud 3.2.235\", \"Checkov by Prisma Cloud 3.2.236\", \"Checkov by Prisma Cloud 3.2.237\", \"Checkov by Prisma Cloud 3.2.238\", \"Checkov by Prisma Cloud 3.2.239\", \"Checkov by Prisma Cloud 3.2.240\", \"Checkov by Prisma Cloud 3.2.241\", \"Checkov by Prisma Cloud 3.2.242\", \"Checkov by Prisma Cloud 3.2.243\", \"Checkov by Prisma Cloud 3.2.244\", \"Checkov by Prisma Cloud 3.2.245\", \"Checkov by Prisma Cloud 3.2.246\", \"Checkov by Prisma Cloud 3.2.247\", \"Checkov by Prisma Cloud 3.2.248\", \"Checkov by Prisma Cloud 3.2.249\", \"Checkov by Prisma Cloud 3.2.250\", \"Checkov by Prisma Cloud 3.2.251\", \"Checkov by Prisma Cloud 3.2.252\", \"Checkov by Prisma Cloud 3.2.253\", \"Checkov by Prisma Cloud 3.2.254\", \"Checkov by Prisma Cloud 3.2.255\", \"Checkov by Prisma Cloud 3.2.256\", \"Checkov by Prisma Cloud 3.2.257\", \"Checkov by Prisma Cloud 3.2.258\", \"Checkov by Prisma Cloud 3.2.259\", \"Checkov by Prisma Cloud 3.2.260\", \"Checkov by Prisma Cloud 3.2.261\", \"Checkov by Prisma Cloud 3.2.262\", \"Checkov by Prisma Cloud 3.2.263\", \"Checkov by Prisma Cloud 3.2.264\", \"Checkov by Prisma Cloud 3.2.265\", \"Checkov by Prisma Cloud 3.2.266\", \"Checkov by Prisma Cloud 3.2.267\", \"Checkov by Prisma Cloud 3.2.268\", \"Checkov by Prisma Cloud 3.2.269\", \"Checkov by Prisma Cloud 3.2.270\", \"Checkov by Prisma Cloud 3.2.271\", \"Checkov by Prisma Cloud 3.2.272\", \"Checkov by Prisma Cloud 3.2.273\", \"Checkov by Prisma Cloud 3.2.274\", \"Checkov by Prisma Cloud 3.2.275\", \"Checkov by Prisma Cloud 3.2.276\", \"Checkov by Prisma Cloud 3.2.277\", \"Checkov by Prisma Cloud 3.2.278\", \"Checkov by Prisma Cloud 3.2.279\", \"Checkov by Prisma Cloud 3.2.280\", \"Checkov by Prisma Cloud 3.2.281\", \"Checkov by Prisma Cloud 3.2.282\", \"Checkov by Prisma Cloud 3.2.283\", \"Checkov by Prisma Cloud 3.2.284\", \"Checkov by Prisma Cloud 3.2.285\", \"Checkov by Prisma Cloud 3.2.286\", \"Checkov by Prisma Cloud 3.2.287\", \"Checkov by Prisma Cloud 3.2.288\", \"Checkov by Prisma Cloud 3.2.289\", \"Checkov by Prisma Cloud 3.2.290\", \"Checkov by Prisma Cloud 3.2.291\", \"Checkov by Prisma Cloud 3.2.292\", \"Checkov by Prisma Cloud 3.2.293\", \"Checkov by Prisma Cloud 3.2.294\", \"Checkov by Prisma Cloud 3.2.295\", \"Checkov by Prisma Cloud 3.2.296\", \"Checkov by Prisma Cloud 3.2.297\", \"Checkov by Prisma Cloud 3.2.298\", \"Checkov by Prisma Cloud 3.2.299\", \"Checkov by Prisma Cloud 3.2.300\", \"Checkov by Prisma Cloud 3.2.301\", \"Checkov by Prisma Cloud 3.2.302\", \"Checkov by Prisma Cloud 3.2.303\", \"Checkov by Prisma Cloud 3.2.304\", \"Checkov by Prisma Cloud 3.2.305\", \"Checkov by Prisma Cloud 3.2.306\", \"Checkov by Prisma Cloud 3.2.307\", \"Checkov by Prisma Cloud 3.2.308\", \"Checkov by Prisma Cloud 3.2.309\", \"Checkov by Prisma Cloud 3.2.310\", \"Checkov by Prisma Cloud 3.2.311\", \"Checkov by Prisma Cloud 3.2.312\", \"Checkov by Prisma Cloud 3.2.313\", \"Checkov by Prisma Cloud 3.2.314\", \"Checkov by Prisma Cloud 3.2.315\", \"Checkov by Prisma Cloud 3.2.316\", \"Checkov by Prisma Cloud 3.2.317\", \"Checkov by Prisma Cloud 3.2.318\", \"Checkov by Prisma Cloud 3.2.319\", \"Checkov by Prisma Cloud 3.2.320\", \"Checkov by Prisma Cloud 3.2.321\", \"Checkov by Prisma Cloud 3.2.322\", \"Checkov by Prisma Cloud 3.2.323\", \"Checkov by Prisma Cloud 3.2.324\", \"Checkov by Prisma Cloud 3.2.325\", \"Checkov by Prisma Cloud 3.2.326\", \"Checkov by Prisma Cloud 3.2.327\", \"Checkov by Prisma Cloud 3.2.328\", \"Checkov by Prisma Cloud 3.2.329\", \"Checkov by Prisma Cloud 3.2.330\", \"Checkov by Prisma Cloud 3.2.331\", \"Checkov by Prisma Cloud 3.2.332\", \"Checkov by Prisma Cloud 3.2.333\", \"Checkov by Prisma Cloud 3.2.334\", \"Checkov by Prisma Cloud 3.2.335\", \"Checkov by Prisma Cloud 3.2.336\", \"Checkov by Prisma Cloud 3.2.337\", \"Checkov by Prisma Cloud 3.2.338\", \"Checkov by Prisma Cloud 3.2.339\", \"Checkov by Prisma Cloud 3.2.340\", \"Checkov by Prisma Cloud 3.2.341\", \"Checkov by Prisma Cloud 3.2.342\", \"Checkov by Prisma Cloud 3.2.343\", \"Checkov by Prisma Cloud 3.2.344\", \"Checkov by Prisma Cloud 3.2.345\", \"Checkov by Prisma Cloud 3.2.346\", \"Checkov by Prisma Cloud 3.2.347\", \"Checkov by Prisma Cloud 3.2.348\", \"Checkov by Prisma Cloud 3.2.349\", \"Checkov by Prisma Cloud 3.2.350\", \"Checkov by Prisma Cloud 3.2.351\", \"Checkov by Prisma Cloud 3.2.352\", \"Checkov by Prisma Cloud 3.2.353\", \"Checkov by Prisma Cloud 3.2.354\", \"Checkov by Prisma Cloud 3.2.355\", \"Checkov by Prisma Cloud 3.2.356\", \"Checkov by Prisma Cloud 3.2.357\", \"Checkov by Prisma Cloud 3.2.358\", \"Checkov by Prisma Cloud 3.2.359\", \"Checkov by Prisma Cloud 3.2.360\", \"Checkov by Prisma Cloud 3.2.361\", \"Checkov by Prisma Cloud 3.2.362\", \"Checkov by Prisma Cloud 3.2.363\", \"Checkov by Prisma Cloud 3.2.364\", \"Checkov by Prisma Cloud 3.2.365\", \"Checkov by Prisma Cloud 3.2.366\", \"Checkov by Prisma Cloud 3.2.367\", \"Checkov by Prisma Cloud 3.2.368\", \"Checkov by Prisma Cloud 3.2.369\", \"Checkov by Prisma Cloud 3.2.370\", \"Checkov by Prisma Cloud 3.2.371\", \"Checkov by Prisma Cloud 3.2.372\", \"Checkov by Prisma Cloud 3.2.373\", \"Checkov by Prisma Cloud 3.2.374\", \"Checkov by Prisma Cloud 3.2.375\", \"Checkov by Prisma Cloud 3.2.376\", \"Checkov by Prisma Cloud 3.2.377\", \"Checkov by Prisma Cloud 3.2.378\", \"Checkov by Prisma Cloud 3.2.379\", \"Checkov by Prisma Cloud 3.2.380\", \"Checkov by Prisma Cloud 3.2.381\", \"Checkov by Prisma Cloud 3.2.382\", \"Checkov by Prisma Cloud 3.2.383\", \"Checkov by Prisma Cloud 3.2.384\", \"Checkov by Prisma Cloud 3.2.385\", \"Checkov by Prisma Cloud 3.2.386\", \"Checkov by Prisma Cloud 3.2.387\", \"Checkov by Prisma Cloud 3.2.388\", \"Checkov by Prisma Cloud 3.2.389\", \"Checkov by Prisma Cloud 3.2.390\", \"Checkov by Prisma Cloud 3.2.391\", \"Checkov by Prisma Cloud 3.2.392\", \"Checkov by Prisma Cloud 3.2.393\", \"Checkov by Prisma Cloud 3.2.394\", \"Checkov by Prisma Cloud 3.2.395\", \"Checkov by Prisma Cloud 3.2.396\", \"Checkov by Prisma Cloud 3.2.397\", \"Checkov by Prisma Cloud 3.2.398\", \"Checkov by Prisma Cloud 3.2.399\", \"Checkov by Prisma Cloud 3.2.400\", \"Checkov by Prisma Cloud 3.2.401\", \"Checkov by Prisma Cloud 3.2.402\", \"Checkov by Prisma Cloud 3.2.403\", \"Checkov by Prisma Cloud 3.2.404\", \"Checkov by Prisma Cloud 3.2.405\", \"Checkov by Prisma Cloud 3.2.406\", \"Checkov by Prisma Cloud 3.2.407\", \"Checkov by Prisma Cloud 3.2.408\", \"Checkov by Prisma Cloud 3.2.409\", \"Checkov by Prisma Cloud 3.2.410\", \"Checkov by Prisma Cloud 3.2.411\", \"Checkov by Prisma Cloud 3.2.412\", \"Checkov by Prisma Cloud 3.2.413\", \"Checkov by Prisma Cloud 3.2.414\", \"Checkov by Prisma Cloud 3.2.415\", \"Checkov by Prisma Cloud 3.2.416\", \"Checkov by Prisma Cloud 3.2.417\", \"Checkov by Prisma Cloud 3.2.418\", \"Checkov by Prisma Cloud 3.2.419\", \"Checkov by Prisma Cloud 3.2.420\", \"Checkov by Prisma Cloud 3.2.421\", \"Checkov by Prisma Cloud 3.2.422\", \"Checkov by Prisma Cloud 3.2.423\", \"Checkov by Prisma Cloud 3.2.424\", \"Checkov by Prisma Cloud 3.2.425\", \"Checkov by Prisma Cloud 3.2.426\", \"Checkov by Prisma Cloud 3.2.427\", \"Checkov by Prisma Cloud 3.2.428\", \"Checkov by Prisma Cloud 3.2.429\", \"Checkov by Prisma Cloud 3.2.430\", \"Checkov by Prisma Cloud 3.2.431\", \"Checkov by Prisma Cloud 3.2.432\", \"Checkov by Prisma Cloud 3.2.433\", \"Checkov by Prisma Cloud 3.2.434\", \"Checkov by Prisma Cloud 3.2.435\", \"Checkov by Prisma Cloud 3.2.436\", \"Checkov by Prisma Cloud 3.2.437\", \"Checkov by Prisma Cloud 3.2.438\", \"Checkov by Prisma Cloud 3.2.439\", \"Checkov by Prisma Cloud 3.2.440\", \"Checkov by Prisma Cloud 3.2.441\", \"Checkov by Prisma Cloud 3.2.442\", \"Checkov by Prisma Cloud 3.2.443\", \"Checkov by Prisma Cloud 3.2.444\", \"Checkov by Prisma Cloud 3.2.445\", \"Checkov by Prisma Cloud 3.2.446\", \"Checkov by Prisma Cloud 3.2.447\", \"Checkov by Prisma Cloud 3.2.448\", \"Checkov by Prisma Cloud 3.2.449\", \"Checkov by Prisma Cloud 3.2.450\", \"Checkov by Prisma Cloud 3.2.451\", \"Checkov by Prisma Cloud 3.2.452\", \"Checkov by Prisma Cloud 3.2.453\", \"Checkov by Prisma Cloud 3.2.454\", \"Checkov by Prisma Cloud 3.2.455\", \"Checkov by Prisma Cloud 3.2.456\", \"Checkov by Prisma Cloud 3.2.457\", \"Checkov by Prisma Cloud 3.2.458\", \"Checkov by Prisma Cloud 3.2.459\", \"Checkov by Prisma Cloud 3.2.460\", \"Checkov by Prisma Cloud 3.2.461\", \"Checkov by Prisma Cloud 3.2.462\", \"Checkov by Prisma Cloud 3.2.463\", \"Checkov by Prisma Cloud 3.2.464\", \"Checkov by Prisma Cloud 3.2.465\", \"Checkov by Prisma Cloud 3.2.466\", \"Checkov by Prisma Cloud 3.2.467\", \"Checkov by Prisma Cloud 3.2.468\", \"Checkov by Prisma Cloud 3.2.469\", \"Checkov by Prisma Cloud 3.2.470\", \"Checkov by Prisma Cloud 3.2.471\", \"Checkov by Prisma Cloud 3.2.472\", \"Checkov by Prisma Cloud 3.2.473\", \"Checkov by Prisma Cloud 3.2.474\", \"Checkov by Prisma Cloud 3.2.475\", \"Checkov by Prisma Cloud 3.2.476\", \"Checkov by Prisma Cloud 3.2.477\", \"Checkov by Prisma Cloud 3.2.478\", \"Checkov by Prisma Cloud 3.2.479\", \"Checkov by Prisma Cloud 3.2.480\", \"Checkov by Prisma Cloud 3.2.481\", \"Checkov by Prisma Cloud 3.2.482\", \"Checkov by Prisma Cloud 3.2.483\", \"Checkov by Prisma Cloud 3.2.484\", \"Checkov by Prisma Cloud 3.2.485\", \"Checkov by Prisma Cloud 3.2.486\", \"Checkov by Prisma Cloud 3.2.487\", \"Checkov by Prisma Cloud 3.2.488\", \"Checkov by Prisma Cloud 3.2.489\", \"Checkov by Prisma Cloud 3.2.490\", \"Checkov by Prisma Cloud 3.2.491\", \"Checkov by Prisma Cloud 3.2.492\", \"Checkov by Prisma Cloud 3.2.493\", \"Checkov by Prisma Cloud 3.2.494\", \"Checkov by Prisma Cloud 3.2.495\", \"Checkov by Prisma Cloud 3.2.496\", \"Checkov by Prisma Cloud 3.2.497\", \"Checkov by Prisma Cloud 3.2.498\", \"Checkov by Prisma Cloud 3.2.499\", \"Checkov by Prisma Cloud 3.2.500\", \"Checkov by Prisma Cloud 3.2.501\", \"Checkov by Prisma Cloud 3.2.502\", \"Checkov by Prisma Cloud 3.2.503\", \"Checkov by Prisma Cloud 3.2.504\", \"Checkov by Prisma Cloud 3.2.505\", \"Checkov by Prisma Cloud 3.2.506\", \"Checkov by Prisma Cloud 3.2.507\", \"Checkov by Prisma Cloud 3.2.508\", \"Checkov by Prisma Cloud 3.2.509\", \"Checkov by Prisma Cloud 3.2.510\", \"Checkov by Prisma Cloud 3.2.511\", \"Checkov by Prisma Cloud 3.2.512\", \"Checkov by Prisma Cloud 3.2.513\", \"Checkov by Prisma Cloud 3.2.514\", \"Checkov by Prisma Cloud 3.2.515\", \"Checkov by Prisma Cloud 3.2.516\", \"Checkov by Prisma Cloud 3.2.517\", \"Checkov by Prisma Cloud 3.2.518\", \"Checkov by Prisma Cloud 3.2.519\", \"Checkov by Prisma Cloud 3.2.520\", \"Checkov by Prisma Cloud 3.2.521\", \"Checkov by Prisma Cloud 3.2.522\", \"Checkov by Prisma Cloud 3.2.523\", \"Checkov by Prisma Cloud 3.2.524\", \"Checkov by Prisma Cloud 3.2.525\", \"Checkov by Prisma Cloud 3.2.526\", \"Checkov by Prisma Cloud 3.2.527\", \"Checkov by Prisma Cloud 3.2.528\", \"Checkov by Prisma Cloud 3.2.529\", \"Checkov by Prisma Cloud 3.2.530\", \"Checkov by Prisma Cloud 3.2.531\"], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"3.2.532\", \"versionStartIncluding\": \"3.2.0\"}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"d6c1279f-00f6-4ef7-9217-f89ffe703ec0\", \"shortName\": \"palo_alto\", \"dateUpdated\": \"2026-09-10T06:03:50.513Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-0303\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-10T13:01:27.361Z\", \"dateReserved\": \"2025-11-03T20:45:01.388Z\", \"assignerOrgId\": \"d6c1279f-00f6-4ef7-9217-f89ffe703ec0\", \"datePublished\": \"2026-09-10T06:03:50.513Z\", \"assignerShortName\": \"palo_alto\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2026-AVI-1156

Vulnerability from certfr_avis - Published: 2026-09-10 - Updated: 2026-09-10

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une injection de code indirecte à distance (XSS).

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.3 antérieures à 6.3.3-h15
Palo Alto Networks	PAN-OS	PAN-OS versions 12.1.x antérieures à 12.1.10
Palo Alto Networks	GlobalProtect App	GlobalProtect App toutes versions pour Android
Palo Alto Networks	Prisma Access	Prisma Access versions antérieures à 11.2.0 sans les derniers correctifs de sécurité
Palo Alto Networks	Prisma Access	Prisma Access versions antérieures à 10.2.0 sans les derniers correctifs de sécurité
Palo Alto Networks	Checkov by Prisma Cloud	Checkov by Prisma Cloud versions 3.2.x antérieures à 3.2.532
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.4-hx antérieures à 11.1.4-h36
Palo Alto Networks	PAN-OS	PAN-OS versions 12.2.x antérieures à 12.2.3
Palo Alto Networks	PAN-OS	PAN-OS versions antérieures à 10.2.7-h37
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.0 antérieures à 6.0.15
Palo Alto Networks	Cloud NGFW	Cloud NGFW toutes versions
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.13-hx antérieures à 11.2.13-h2
Palo Alto Networks	Cortex XDR Broker	Cortex XDR Broker versions antérieures à 32.0.52
Palo Alto Networks	Prisma Access	Prisma Access Agent versions antérieures à 26.2 pour Windows
Palo Alto Networks	GlobalProtect App	GlobalProtect App toutes versions pour ChromeOS
Palo Alto Networks	PAN-OS	PAN-OS versions 11.2.4-hx antérieures à 11.2.4-h21
Palo Alto Networks	Prisma Access	Prisma Access Agent versions antérieures à 26.3 pour Linux
Palo Alto Networks	GlobalProtect App	GlobalProtect App versions 6.2 antérieures à 6.2.8-h14
Palo Alto Networks	GlobalProtect App	GlobalProtect App toutes versions pour iOS
Palo Alto Networks	PAN-OS	PAN-OS versions 11.1.16-hx antérieures à 11.1.16-h2
Palo Alto Networks	Prisma Access	Prisma Browser versions antérieures à 151.26.5.170
Palo Alto Networks	PAN-OS	PAN-OS versions 12.1.4-hx antérieures à 12.1.4-h10

References

Title

Publication Time

FKIE_CVE-2026-0303

Vulnerability from fkie_nvd - Published: 2026-09-10 07:17 - Updated: 2026-09-10 14:50

Severity

2.4 (Low) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Summary

References

	URL	Tags
	psirt@paloaltonetworks.com	https://security.paloaltonetworks.com/CVE-2026-0303

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Checkov by Prisma Cloud",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "3.2.532",
                  "status": "unaffected"
                }
              ],
              "lessThan": "3.2.532",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "psirt@paloaltonetworks.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."
    }
  ],
  "id": "CVE-2026-0303",
  "lastModified": "2026-09-10T14:50:07.813",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NO",
          "Recovery": "USER",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 2.4,
          "baseSeverity": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "UNREPORTED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "AMBER",
          "subAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "HIGH",
          "subIntegrityImpact": "HIGH",
          "userInteraction": "PASSIVE",
          "valueDensity": "DIFFUSE",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "MODERATE"
        },
        "source": "psirt@paloaltonetworks.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-0303",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-09-10T13:01:15.631812Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-09-10T07:17:02.140",
  "references": [
    {
      "source": "psirt@paloaltonetworks.com",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0303"
    }
  ],
  "sourceIdentifier": "psirt@paloaltonetworks.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-829"
        }
      ],
      "source": "psirt@paloaltonetworks.com",
      "type": "Secondary"
    }
  ]
}

GHSA-MM26-4PQ5-G973

Vulnerability from github – Published: 2026-09-10 09:31 – Updated: 2026-09-10 09:31

Details

Severity

2.4 (Low)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-0303"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-829"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-10T07:17:02Z",
    "severity": "LOW"
  },
  "details": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.",
  "id": "GHSA-mm26-4pq5-g973",
  "modified": "2026-09-10T09:31:32Z",
  "published": "2026-09-10T09:31:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0303"
    },
    {
      "type": "WEB",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0303"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-0303 (GCVE-0-2026-0303)

CERTFR-2026-AVI-1156

Solutions

FKIE_CVE-2026-0303

GHSA-MM26-4PQ5-G973

Tags

Sightings

Nomenclature