{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0303", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "state": "PUBLISHED", "assignerShortName": "palo_alto", "dateReserved": "2025-11-03T20:45:01.388Z", "datePublished": "2026-09-10T06:03:50.513Z", "dateUpdated": "2026-09-10T13:01:27.361Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-09-10T06:03:50.513Z"}, "title": "Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File", "datePublic": "2026-09-09T16:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-829", "description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-248", "descriptions": [{"lang": "en", "value": "CAPEC-248 Command Injection"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "versions": [{"status": "affected", "version": "3.2.0", "lessThan": "3.2.532", "changes": [{"at": "3.2.532", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.2.0", "versionEndExcluding": "3.2.532"}]}]}], "descriptions": [{"lang": "en", "value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.&nbsp;</p>"}]}], "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0303", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "If the user scans infrastructure as code (IaC) files from untrusted sources."}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "HIGH", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "MODERATE", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "LOW", "baseScore": 2.4, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}], "configurations": [{"lang": "eng", "value": "No special configuration is required to be vulnerable to this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<span>No special configuration is required to be vulnerable to this issue.</span>"}]}], "workarounds": [{"lang": "eng", "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."}]}], "solutions": [{"lang": "eng", "value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.531\n Upgrade to 3.2.532or later.\n \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr>\n <td>Checkov by Prisma Cloud 3.2<br></td>\n <td>3.2.0 through 3.2.531</td>\n <td>Upgrade to 3.2.532or later.</td>\n </tr></tbody></table><br>Checkov integration in Prisma Cloud is upgraded automatically when new versions become available."}]}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.&nbsp;"}]}], "timeline": [{"time": "2026-09-09T16:00:00.000Z", "lang": "en", "value": "Initial Publication"}], "credits": [{"lang": "en", "value": "Michael Adedeji", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "x_affectedList": ["Checkov by Prisma Cloud 3.2.0", "Checkov by Prisma Cloud 3.2.1", "Checkov by Prisma Cloud 3.2.2", "Checkov by Prisma Cloud 3.2.3", "Checkov by Prisma Cloud 3.2.4", "Checkov by Prisma Cloud 3.2.5", "Checkov by Prisma Cloud 3.2.6", "Checkov by Prisma Cloud 3.2.7", "Checkov by Prisma Cloud 3.2.8", "Checkov by Prisma Cloud 3.2.9", "Checkov by Prisma Cloud 3.2.10", "Checkov by Prisma Cloud 3.2.11", "Checkov by Prisma Cloud 3.2.12", "Checkov by Prisma Cloud 3.2.13", "Checkov by Prisma Cloud 3.2.14", "Checkov by Prisma Cloud 3.2.15", "Checkov by Prisma Cloud 3.2.16", "Checkov by Prisma Cloud 3.2.17", "Checkov by Prisma Cloud 3.2.18", "Checkov by Prisma Cloud 3.2.19", "Checkov by Prisma Cloud 3.2.20", "Checkov by Prisma Cloud 3.2.21", "Checkov by Prisma Cloud 3.2.22", "Checkov by Prisma Cloud 3.2.23", "Checkov by Prisma Cloud 3.2.24", "Checkov by Prisma Cloud 3.2.25", "Checkov by Prisma Cloud 3.2.26", "Checkov by Prisma Cloud 3.2.27", "Checkov by Prisma Cloud 3.2.28", "Checkov by Prisma Cloud 3.2.29", "Checkov by Prisma Cloud 3.2.30", "Checkov by Prisma Cloud 3.2.31", "Checkov by Prisma Cloud 3.2.32", "Checkov by Prisma Cloud 3.2.33", "Checkov by Prisma Cloud 3.2.34", "Checkov by Prisma Cloud 3.2.35", "Checkov by Prisma Cloud 3.2.36", "Checkov by Prisma Cloud 3.2.37", "Checkov by Prisma Cloud 3.2.38", "Checkov by Prisma Cloud 3.2.39", "Checkov by Prisma Cloud 3.2.40", "Checkov by Prisma Cloud 3.2.41", "Checkov by Prisma Cloud 3.2.42", "Checkov by Prisma Cloud 3.2.43", "Checkov by Prisma Cloud 3.2.44", "Checkov by Prisma Cloud 3.2.45", "Checkov by Prisma Cloud 3.2.46", "Checkov by Prisma Cloud 3.2.47", "Checkov by Prisma Cloud 3.2.48", "Checkov by Prisma Cloud 3.2.49", "Checkov by Prisma Cloud 3.2.50", "Checkov by Prisma Cloud 3.2.51", "Checkov by Prisma Cloud 3.2.52", "Checkov by Prisma Cloud 3.2.53", "Checkov by Prisma Cloud 3.2.54", "Checkov by Prisma Cloud 3.2.55", "Checkov by Prisma Cloud 3.2.56", "Checkov by Prisma Cloud 3.2.57", "Checkov by Prisma Cloud 3.2.58", "Checkov by Prisma Cloud 3.2.59", "Checkov by Prisma Cloud 3.2.60", "Checkov by Prisma Cloud 3.2.61", "Checkov by Prisma Cloud 3.2.62", "Checkov by Prisma Cloud 3.2.63", "Checkov by Prisma Cloud 3.2.64", "Checkov by Prisma Cloud 3.2.65", "Checkov by Prisma Cloud 3.2.66", "Checkov by Prisma Cloud 3.2.67", "Checkov by Prisma Cloud 3.2.68", "Checkov by Prisma Cloud 3.2.69", "Checkov by Prisma Cloud 3.2.70", "Checkov by Prisma Cloud 3.2.71", "Checkov by Prisma Cloud 3.2.72", "Checkov by Prisma Cloud 3.2.73", "Checkov by Prisma Cloud 3.2.74", "Checkov by Prisma Cloud 3.2.75", "Checkov by Prisma Cloud 3.2.76", "Checkov by Prisma Cloud 3.2.77", "Checkov by Prisma Cloud 3.2.78", "Checkov by Prisma Cloud 3.2.79", "Checkov by Prisma Cloud 3.2.80", "Checkov by Prisma Cloud 3.2.81", "Checkov by Prisma Cloud 3.2.82", "Checkov by Prisma Cloud 3.2.83", "Checkov by Prisma Cloud 3.2.84", "Checkov by Prisma Cloud 3.2.85", "Checkov by Prisma Cloud 3.2.86", "Checkov by Prisma Cloud 3.2.87", "Checkov by Prisma Cloud 3.2.88", "Checkov by Prisma Cloud 3.2.89", "Checkov by Prisma Cloud 3.2.90", "Checkov by Prisma Cloud 3.2.91", "Checkov by Prisma Cloud 3.2.92", "Checkov by Prisma Cloud 3.2.93", "Checkov by Prisma Cloud 3.2.94", "Checkov by Prisma Cloud 3.2.95", "Checkov by Prisma Cloud 3.2.96", "Checkov by Prisma Cloud 3.2.97", "Checkov by Prisma Cloud 3.2.98", "Checkov by Prisma Cloud 3.2.99", "Checkov by Prisma Cloud 3.2.100", "Checkov by Prisma Cloud 3.2.101", "Checkov by Prisma Cloud 3.2.102", "Checkov by Prisma Cloud 3.2.103", "Checkov by Prisma Cloud 3.2.104", "Checkov by Prisma Cloud 3.2.105", "Checkov by Prisma Cloud 3.2.106", "Checkov by Prisma Cloud 3.2.107", "Checkov by Prisma Cloud 3.2.108", "Checkov by Prisma Cloud 3.2.109", "Checkov by Prisma Cloud 3.2.110", "Checkov by Prisma Cloud 3.2.111", "Checkov by Prisma Cloud 3.2.112", "Checkov by Prisma Cloud 3.2.113", "Checkov by Prisma Cloud 3.2.114", "Checkov by Prisma Cloud 3.2.115", "Checkov by Prisma Cloud 3.2.116", "Checkov by Prisma Cloud 3.2.117", "Checkov by Prisma Cloud 3.2.118", "Checkov by Prisma Cloud 3.2.119", "Checkov by Prisma Cloud 3.2.120", "Checkov by Prisma Cloud 3.2.121", "Checkov by Prisma Cloud 3.2.122", "Checkov by Prisma Cloud 3.2.123", "Checkov by Prisma Cloud 3.2.124", "Checkov by Prisma Cloud 3.2.125", "Checkov by Prisma Cloud 3.2.126", "Checkov by Prisma Cloud 3.2.127", "Checkov by Prisma Cloud 3.2.128", "Checkov by Prisma Cloud 3.2.129", "Checkov by Prisma Cloud 3.2.130", "Checkov by Prisma Cloud 3.2.131", "Checkov by Prisma Cloud 3.2.132", "Checkov by Prisma Cloud 3.2.133", "Checkov by Prisma Cloud 3.2.134", "Checkov by Prisma Cloud 3.2.135", "Checkov by Prisma Cloud 3.2.136", "Checkov by Prisma Cloud 3.2.137", "Checkov by Prisma Cloud 3.2.138", "Checkov by Prisma Cloud 3.2.139", "Checkov by Prisma Cloud 3.2.140", "Checkov by Prisma Cloud 3.2.141", "Checkov by Prisma Cloud 3.2.142", "Checkov by Prisma Cloud 3.2.143", "Checkov by Prisma Cloud 3.2.144", "Checkov by Prisma Cloud 3.2.145", "Checkov by Prisma Cloud 3.2.146", "Checkov by Prisma Cloud 3.2.147", "Checkov by Prisma Cloud 3.2.148", "Checkov by Prisma Cloud 3.2.149", "Checkov by Prisma Cloud 3.2.150", "Checkov by Prisma Cloud 3.2.151", "Checkov by Prisma Cloud 3.2.152", "Checkov by Prisma Cloud 3.2.153", "Checkov by Prisma Cloud 3.2.154", "Checkov by Prisma Cloud 3.2.155", "Checkov by Prisma Cloud 3.2.156", "Checkov by Prisma Cloud 3.2.157", "Checkov by Prisma Cloud 3.2.158", "Checkov by Prisma Cloud 3.2.159", "Checkov by Prisma Cloud 3.2.160", "Checkov by Prisma Cloud 3.2.161", "Checkov by Prisma Cloud 3.2.162", "Checkov by Prisma Cloud 3.2.163", "Checkov by Prisma Cloud 3.2.164", "Checkov by Prisma Cloud 3.2.165", "Checkov by Prisma Cloud 3.2.166", "Checkov by Prisma Cloud 3.2.167", "Checkov by Prisma Cloud 3.2.168", "Checkov by Prisma Cloud 3.2.169", "Checkov by Prisma Cloud 3.2.170", "Checkov by Prisma Cloud 3.2.171", "Checkov by Prisma Cloud 3.2.172", "Checkov by Prisma Cloud 3.2.173", "Checkov by Prisma Cloud 3.2.174", "Checkov by Prisma Cloud 3.2.175", "Checkov by Prisma Cloud 3.2.176", "Checkov by Prisma Cloud 3.2.177", "Checkov by Prisma Cloud 3.2.178", "Checkov by Prisma Cloud 3.2.179", "Checkov by Prisma Cloud 3.2.180", "Checkov by Prisma Cloud 3.2.181", "Checkov by Prisma Cloud 3.2.182", "Checkov by Prisma Cloud 3.2.183", "Checkov by Prisma Cloud 3.2.184", "Checkov by Prisma Cloud 3.2.185", "Checkov by Prisma Cloud 3.2.186", "Checkov by Prisma Cloud 3.2.187", "Checkov by Prisma Cloud 3.2.188", "Checkov by Prisma Cloud 3.2.189", "Checkov by Prisma Cloud 3.2.190", "Checkov by Prisma Cloud 3.2.191", "Checkov by Prisma Cloud 3.2.192", "Checkov by Prisma Cloud 3.2.193", "Checkov by Prisma Cloud 3.2.194", "Checkov by Prisma Cloud 3.2.195", "Checkov by Prisma Cloud 3.2.196", "Checkov by Prisma Cloud 3.2.197", "Checkov by Prisma Cloud 3.2.198", "Checkov by Prisma Cloud 3.2.199", "Checkov by Prisma Cloud 3.2.200", "Checkov by Prisma Cloud 3.2.201", "Checkov by Prisma Cloud 3.2.202", "Checkov by Prisma Cloud 3.2.203", "Checkov by Prisma Cloud 3.2.204", "Checkov by Prisma Cloud 3.2.205", "Checkov by Prisma Cloud 3.2.206", "Checkov by Prisma Cloud 3.2.207", "Checkov by Prisma Cloud 3.2.208", "Checkov by Prisma Cloud 3.2.209", "Checkov by Prisma Cloud 3.2.210", "Checkov by Prisma Cloud 3.2.211", "Checkov by Prisma Cloud 3.2.212", "Checkov by Prisma Cloud 3.2.213", "Checkov by Prisma Cloud 3.2.214", "Checkov by Prisma Cloud 3.2.215", "Checkov by Prisma Cloud 3.2.216", "Checkov by Prisma Cloud 3.2.217", "Checkov by Prisma Cloud 3.2.218", "Checkov by Prisma Cloud 3.2.219", "Checkov by Prisma Cloud 3.2.220", "Checkov by Prisma Cloud 3.2.221", "Checkov by Prisma Cloud 3.2.222", "Checkov by Prisma Cloud 3.2.223", "Checkov by Prisma Cloud 3.2.224", "Checkov by Prisma Cloud 3.2.225", "Checkov by Prisma Cloud 3.2.226", "Checkov by Prisma Cloud 3.2.227", "Checkov by Prisma Cloud 3.2.228", "Checkov by Prisma Cloud 3.2.229", "Checkov by Prisma Cloud 3.2.230", "Checkov by Prisma Cloud 3.2.231", "Checkov by Prisma Cloud 3.2.232", "Checkov by Prisma Cloud 3.2.233", "Checkov by Prisma Cloud 3.2.234", "Checkov by Prisma Cloud 3.2.235", "Checkov by Prisma Cloud 3.2.236", "Checkov by Prisma Cloud 3.2.237", "Checkov by Prisma Cloud 3.2.238", "Checkov by Prisma Cloud 3.2.239", "Checkov by Prisma Cloud 3.2.240", "Checkov by Prisma Cloud 3.2.241", "Checkov by Prisma Cloud 3.2.242", "Checkov by Prisma Cloud 3.2.243", "Checkov by Prisma Cloud 3.2.244", "Checkov by Prisma Cloud 3.2.245", "Checkov by Prisma Cloud 3.2.246", "Checkov by Prisma Cloud 3.2.247", "Checkov by Prisma Cloud 3.2.248", "Checkov by Prisma Cloud 3.2.249", "Checkov by Prisma Cloud 3.2.250", "Checkov by Prisma Cloud 3.2.251", "Checkov by Prisma Cloud 3.2.252", "Checkov by Prisma Cloud 3.2.253", "Checkov by Prisma Cloud 3.2.254", "Checkov by Prisma Cloud 3.2.255", "Checkov by Prisma Cloud 3.2.256", "Checkov by Prisma Cloud 3.2.257", "Checkov by Prisma Cloud 3.2.258", "Checkov by Prisma Cloud 3.2.259", "Checkov by Prisma Cloud 3.2.260", "Checkov by Prisma Cloud 3.2.261", "Checkov by Prisma Cloud 3.2.262", "Checkov by Prisma Cloud 3.2.263", "Checkov by Prisma Cloud 3.2.264", "Checkov by Prisma Cloud 3.2.265", "Checkov by Prisma Cloud 3.2.266", "Checkov by Prisma Cloud 3.2.267", "Checkov by Prisma Cloud 3.2.268", "Checkov by Prisma Cloud 3.2.269", "Checkov by Prisma Cloud 3.2.270", "Checkov by Prisma Cloud 3.2.271", "Checkov by Prisma Cloud 3.2.272", "Checkov by Prisma Cloud 3.2.273", "Checkov by Prisma Cloud 3.2.274", "Checkov by Prisma Cloud 3.2.275", "Checkov by Prisma Cloud 3.2.276", "Checkov by Prisma Cloud 3.2.277", "Checkov by Prisma Cloud 3.2.278", "Checkov by Prisma Cloud 3.2.279", "Checkov by Prisma Cloud 3.2.280", "Checkov by Prisma Cloud 3.2.281", "Checkov by Prisma Cloud 3.2.282", "Checkov by Prisma Cloud 3.2.283", "Checkov by Prisma Cloud 3.2.284", "Checkov by Prisma Cloud 3.2.285", "Checkov by Prisma Cloud 3.2.286", "Checkov by Prisma Cloud 3.2.287", "Checkov by Prisma Cloud 3.2.288", "Checkov by Prisma Cloud 3.2.289", "Checkov by Prisma Cloud 3.2.290", "Checkov by Prisma Cloud 3.2.291", "Checkov by Prisma Cloud 3.2.292", "Checkov by Prisma Cloud 3.2.293", "Checkov by Prisma Cloud 3.2.294", "Checkov by Prisma Cloud 3.2.295", "Checkov by Prisma Cloud 3.2.296", "Checkov by Prisma Cloud 3.2.297", "Checkov by Prisma Cloud 3.2.298", "Checkov by Prisma Cloud 3.2.299", "Checkov by Prisma Cloud 3.2.300", "Checkov by Prisma Cloud 3.2.301", "Checkov by Prisma Cloud 3.2.302", "Checkov by Prisma Cloud 3.2.303", "Checkov by Prisma Cloud 3.2.304", "Checkov by Prisma Cloud 3.2.305", "Checkov by Prisma Cloud 3.2.306", "Checkov by Prisma Cloud 3.2.307", "Checkov by Prisma Cloud 3.2.308", "Checkov by Prisma Cloud 3.2.309", "Checkov by Prisma Cloud 3.2.310", "Checkov by Prisma Cloud 3.2.311", "Checkov by Prisma Cloud 3.2.312", "Checkov by Prisma Cloud 3.2.313", "Checkov by Prisma Cloud 3.2.314", "Checkov by Prisma Cloud 3.2.315", "Checkov by Prisma Cloud 3.2.316", "Checkov by Prisma Cloud 3.2.317", "Checkov by Prisma Cloud 3.2.318", "Checkov by Prisma Cloud 3.2.319", "Checkov by Prisma Cloud 3.2.320", "Checkov by Prisma Cloud 3.2.321", "Checkov by Prisma Cloud 3.2.322", "Checkov by Prisma Cloud 3.2.323", "Checkov by Prisma Cloud 3.2.324", "Checkov by Prisma Cloud 3.2.325", "Checkov by Prisma Cloud 3.2.326", "Checkov by Prisma Cloud 3.2.327", "Checkov by Prisma Cloud 3.2.328", "Checkov by Prisma Cloud 3.2.329", "Checkov by Prisma Cloud 3.2.330", "Checkov by Prisma Cloud 3.2.331", "Checkov by Prisma Cloud 3.2.332", "Checkov by Prisma Cloud 3.2.333", "Checkov by Prisma Cloud 3.2.334", "Checkov by Prisma Cloud 3.2.335", "Checkov by Prisma Cloud 3.2.336", "Checkov by Prisma Cloud 3.2.337", "Checkov by Prisma Cloud 3.2.338", "Checkov by Prisma Cloud 3.2.339", "Checkov by Prisma Cloud 3.2.340", "Checkov by Prisma Cloud 3.2.341", "Checkov by Prisma Cloud 3.2.342", "Checkov by Prisma Cloud 3.2.343", "Checkov by Prisma Cloud 3.2.344", "Checkov by Prisma Cloud 3.2.345", "Checkov by Prisma Cloud 3.2.346", "Checkov by Prisma Cloud 3.2.347", "Checkov by Prisma Cloud 3.2.348", "Checkov by Prisma Cloud 3.2.349", "Checkov by Prisma Cloud 3.2.350", "Checkov by Prisma Cloud 3.2.351", "Checkov by Prisma Cloud 3.2.352", "Checkov by Prisma Cloud 3.2.353", "Checkov by Prisma Cloud 3.2.354", "Checkov by Prisma Cloud 3.2.355", "Checkov by Prisma Cloud 3.2.356", "Checkov by Prisma Cloud 3.2.357", "Checkov by Prisma Cloud 3.2.358", "Checkov by Prisma Cloud 3.2.359", "Checkov by Prisma Cloud 3.2.360", "Checkov by Prisma Cloud 3.2.361", "Checkov by Prisma Cloud 3.2.362", "Checkov by Prisma Cloud 3.2.363", "Checkov by Prisma Cloud 3.2.364", "Checkov by Prisma Cloud 3.2.365", "Checkov by Prisma Cloud 3.2.366", "Checkov by Prisma Cloud 3.2.367", "Checkov by Prisma Cloud 3.2.368", "Checkov by Prisma Cloud 3.2.369", "Checkov by Prisma Cloud 3.2.370", "Checkov by Prisma Cloud 3.2.371", "Checkov by Prisma Cloud 3.2.372", "Checkov by Prisma Cloud 3.2.373", "Checkov by Prisma Cloud 3.2.374", "Checkov by Prisma Cloud 3.2.375", "Checkov by Prisma Cloud 3.2.376", "Checkov by Prisma Cloud 3.2.377", "Checkov by Prisma Cloud 3.2.378", "Checkov by Prisma Cloud 3.2.379", "Checkov by Prisma Cloud 3.2.380", "Checkov by Prisma Cloud 3.2.381", "Checkov by Prisma Cloud 3.2.382", "Checkov by Prisma Cloud 3.2.383", "Checkov by Prisma Cloud 3.2.384", "Checkov by Prisma Cloud 3.2.385", "Checkov by Prisma Cloud 3.2.386", "Checkov by Prisma Cloud 3.2.387", "Checkov by Prisma Cloud 3.2.388", "Checkov by Prisma Cloud 3.2.389", "Checkov by Prisma Cloud 3.2.390", "Checkov by Prisma Cloud 3.2.391", "Checkov by Prisma Cloud 3.2.392", "Checkov by Prisma Cloud 3.2.393", "Checkov by Prisma Cloud 3.2.394", "Checkov by Prisma Cloud 3.2.395", "Checkov by Prisma Cloud 3.2.396", "Checkov by Prisma Cloud 3.2.397", "Checkov by Prisma Cloud 3.2.398", "Checkov by Prisma Cloud 3.2.399", "Checkov by Prisma Cloud 3.2.400", "Checkov by Prisma Cloud 3.2.401", "Checkov by Prisma Cloud 3.2.402", "Checkov by Prisma Cloud 3.2.403", "Checkov by Prisma Cloud 3.2.404", "Checkov by Prisma Cloud 3.2.405", "Checkov by Prisma Cloud 3.2.406", "Checkov by Prisma Cloud 3.2.407", "Checkov by Prisma Cloud 3.2.408", "Checkov by Prisma Cloud 3.2.409", "Checkov by Prisma Cloud 3.2.410", "Checkov by Prisma Cloud 3.2.411", "Checkov by Prisma Cloud 3.2.412", "Checkov by Prisma Cloud 3.2.413", "Checkov by Prisma Cloud 3.2.414", "Checkov by Prisma Cloud 3.2.415", "Checkov by Prisma Cloud 3.2.416", "Checkov by Prisma Cloud 3.2.417", "Checkov by Prisma Cloud 3.2.418", "Checkov by Prisma Cloud 3.2.419", "Checkov by Prisma Cloud 3.2.420", "Checkov by Prisma Cloud 3.2.421", "Checkov by Prisma Cloud 3.2.422", "Checkov by Prisma Cloud 3.2.423", "Checkov by Prisma Cloud 3.2.424", "Checkov by Prisma Cloud 3.2.425", "Checkov by Prisma Cloud 3.2.426", "Checkov by Prisma Cloud 3.2.427", "Checkov by Prisma Cloud 3.2.428", "Checkov by Prisma Cloud 3.2.429", "Checkov by Prisma Cloud 3.2.430", "Checkov by Prisma Cloud 3.2.431", "Checkov by Prisma Cloud 3.2.432", "Checkov by Prisma Cloud 3.2.433", "Checkov by Prisma Cloud 3.2.434", "Checkov by Prisma Cloud 3.2.435", "Checkov by Prisma Cloud 3.2.436", "Checkov by Prisma Cloud 3.2.437", "Checkov by Prisma Cloud 3.2.438", "Checkov by Prisma Cloud 3.2.439", "Checkov by Prisma Cloud 3.2.440", "Checkov by Prisma Cloud 3.2.441", "Checkov by Prisma Cloud 3.2.442", "Checkov by Prisma Cloud 3.2.443", "Checkov by Prisma Cloud 3.2.444", "Checkov by Prisma Cloud 3.2.445", "Checkov by Prisma Cloud 3.2.446", "Checkov by Prisma Cloud 3.2.447", "Checkov by Prisma Cloud 3.2.448", "Checkov by Prisma Cloud 3.2.449", "Checkov by Prisma Cloud 3.2.450", "Checkov by Prisma Cloud 3.2.451", "Checkov by Prisma Cloud 3.2.452", "Checkov by Prisma Cloud 3.2.453", "Checkov by Prisma Cloud 3.2.454", "Checkov by Prisma Cloud 3.2.455", "Checkov by Prisma Cloud 3.2.456", "Checkov by Prisma Cloud 3.2.457", "Checkov by Prisma Cloud 3.2.458", "Checkov by Prisma Cloud 3.2.459", "Checkov by Prisma Cloud 3.2.460", "Checkov by Prisma Cloud 3.2.461", "Checkov by Prisma Cloud 3.2.462", "Checkov by Prisma Cloud 3.2.463", "Checkov by Prisma Cloud 3.2.464", "Checkov by Prisma Cloud 3.2.465", "Checkov by Prisma Cloud 3.2.466", "Checkov by Prisma Cloud 3.2.467", "Checkov by Prisma Cloud 3.2.468", "Checkov by Prisma Cloud 3.2.469", "Checkov by Prisma Cloud 3.2.470", "Checkov by Prisma Cloud 3.2.471", "Checkov by Prisma Cloud 3.2.472", "Checkov by Prisma Cloud 3.2.473", "Checkov by Prisma Cloud 3.2.474", "Checkov by Prisma Cloud 3.2.475", "Checkov by Prisma Cloud 3.2.476", "Checkov by Prisma Cloud 3.2.477", "Checkov by Prisma Cloud 3.2.478", "Checkov by Prisma Cloud 3.2.479", "Checkov by Prisma Cloud 3.2.480", "Checkov by Prisma Cloud 3.2.481", "Checkov by Prisma Cloud 3.2.482", "Checkov by Prisma Cloud 3.2.483", "Checkov by Prisma Cloud 3.2.484", "Checkov by Prisma Cloud 3.2.485", "Checkov by Prisma Cloud 3.2.486", "Checkov by Prisma Cloud 3.2.487", "Checkov by Prisma Cloud 3.2.488", "Checkov by Prisma Cloud 3.2.489", "Checkov by Prisma Cloud 3.2.490", "Checkov by Prisma Cloud 3.2.491", "Checkov by Prisma Cloud 3.2.492", "Checkov by Prisma Cloud 3.2.493", "Checkov by Prisma Cloud 3.2.494", "Checkov by Prisma Cloud 3.2.495", "Checkov by Prisma Cloud 3.2.496", "Checkov by Prisma Cloud 3.2.497", "Checkov by Prisma Cloud 3.2.498", "Checkov by Prisma Cloud 3.2.499", "Checkov by Prisma Cloud 3.2.500", "Checkov by Prisma Cloud 3.2.501", "Checkov by Prisma Cloud 3.2.502", "Checkov by Prisma Cloud 3.2.503", "Checkov by Prisma Cloud 3.2.504", "Checkov by Prisma Cloud 3.2.505", "Checkov by Prisma Cloud 3.2.506", "Checkov by Prisma Cloud 3.2.507", "Checkov by Prisma Cloud 3.2.508", "Checkov by Prisma Cloud 3.2.509", "Checkov by Prisma Cloud 3.2.510", "Checkov by Prisma Cloud 3.2.511", "Checkov by Prisma Cloud 3.2.512", "Checkov by Prisma Cloud 3.2.513", "Checkov by Prisma Cloud 3.2.514", "Checkov by Prisma Cloud 3.2.515", "Checkov by Prisma Cloud 3.2.516", "Checkov by Prisma Cloud 3.2.517", "Checkov by Prisma Cloud 3.2.518", "Checkov by Prisma Cloud 3.2.519", "Checkov by Prisma Cloud 3.2.520", "Checkov by Prisma Cloud 3.2.521", "Checkov by Prisma Cloud 3.2.522", "Checkov by Prisma Cloud 3.2.523", "Checkov by Prisma Cloud 3.2.524", "Checkov by Prisma Cloud 3.2.525", "Checkov by Prisma Cloud 3.2.526", "Checkov by Prisma Cloud 3.2.527", "Checkov by Prisma Cloud 3.2.528", "Checkov by Prisma Cloud 3.2.529", "Checkov by Prisma Cloud 3.2.530", "Checkov by Prisma Cloud 3.2.531"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-10T13:01:15.631812Z", "id": "CVE-2026-0303", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-10T13:01:27.361Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0303", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-10T13:01:15.631812Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-10T13:01:23.286Z"}}], "cna": {"title": "Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Michael Adedeji"}], "impacts": [{"capecId": "CAPEC-248", "descriptions": [{"lang": "en", "value": "CAPEC-248 Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "USER", "baseScore": 2.4, "Automatable": "NO", "attackVector": "LOCAL", "baseSeverity": "LOW", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber", "exploitMaturity": "UNREPORTED", "providerUrgency": "AMBER", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "MODERATE"}, "scenarios": [{"lang": "en", "value": "If the user scans infrastructure as code (IaC) files from untrusted sources."}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "versions": [{"status": "affected", "changes": [{"at": "3.2.532", "status": "unaffected"}], "version": "3.2.0", "lessThan": "3.2.532", "versionType": "custom"}], "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.&nbsp;", "base64": false}]}], "timeline": [{"lang": "en", "time": "2026-09-09T16:00:00.000Z", "value": "Initial Publication"}], "solutions": [{"lang": "eng", "value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.531\n Upgrade to 3.2.532or later.\n \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.", "supportingMedia": [{"type": "text/html", "value": "<table><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr>\n <td>Checkov by Prisma Cloud 3.2<br></td>\n <td>3.2.0 through 3.2.531</td>\n <td>Upgrade to 3.2.532or later.</td>\n </tr></tbody></table><br>Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.", "base64": false}]}], "datePublic": "2026-09-09T16:00:00.000Z", "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0303", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "eng", "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.", "supportingMedia": [{"type": "text/html", "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.", "supportingMedia": [{"type": "text/html", "value": "<p>A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.&nbsp;</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-829", "description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere"}]}], "configurations": [{"lang": "eng", "value": "No special configuration is required to be vulnerable to this issue.", "supportingMedia": [{"type": "text/html", "value": "<span>No special configuration is required to be vulnerable to this issue.</span>", "base64": false}]}], "x_affectedList": ["Checkov by Prisma Cloud 3.2.0", "Checkov by Prisma Cloud 3.2.1", "Checkov by Prisma Cloud 3.2.2", "Checkov by Prisma Cloud 3.2.3", "Checkov by Prisma Cloud 3.2.4", "Checkov by Prisma Cloud 3.2.5", "Checkov by Prisma Cloud 3.2.6", "Checkov by Prisma Cloud 3.2.7", "Checkov by Prisma Cloud 3.2.8", "Checkov by Prisma Cloud 3.2.9", "Checkov by Prisma Cloud 3.2.10", "Checkov by Prisma Cloud 3.2.11", "Checkov by Prisma Cloud 3.2.12", "Checkov by Prisma Cloud 3.2.13", "Checkov by Prisma Cloud 3.2.14", "Checkov by Prisma Cloud 3.2.15", "Checkov by Prisma Cloud 3.2.16", "Checkov by Prisma Cloud 3.2.17", "Checkov by Prisma Cloud 3.2.18", "Checkov by Prisma Cloud 3.2.19", "Checkov by Prisma Cloud 3.2.20", "Checkov by Prisma Cloud 3.2.21", "Checkov by Prisma Cloud 3.2.22", "Checkov by Prisma Cloud 3.2.23", "Checkov by Prisma Cloud 3.2.24", "Checkov by Prisma Cloud 3.2.25", "Checkov by Prisma Cloud 3.2.26", "Checkov by Prisma Cloud 3.2.27", "Checkov by Prisma Cloud 3.2.28", "Checkov by Prisma Cloud 3.2.29", "Checkov by Prisma Cloud 3.2.30", "Checkov by Prisma Cloud 3.2.31", "Checkov by Prisma Cloud 3.2.32", "Checkov by Prisma Cloud 3.2.33", "Checkov by Prisma Cloud 3.2.34", "Checkov by Prisma Cloud 3.2.35", "Checkov by Prisma Cloud 3.2.36", "Checkov by Prisma Cloud 3.2.37", "Checkov by Prisma Cloud 3.2.38", "Checkov by Prisma Cloud 3.2.39", "Checkov by Prisma Cloud 3.2.40", "Checkov by Prisma Cloud 3.2.41", "Checkov by Prisma Cloud 3.2.42", "Checkov by Prisma Cloud 3.2.43", "Checkov by Prisma Cloud 3.2.44", "Checkov by Prisma Cloud 3.2.45", "Checkov by Prisma Cloud 3.2.46", "Checkov by Prisma Cloud 3.2.47", "Checkov by Prisma Cloud 3.2.48", "Checkov by Prisma Cloud 3.2.49", "Checkov by Prisma Cloud 3.2.50", "Checkov by Prisma Cloud 3.2.51", "Checkov by Prisma Cloud 3.2.52", "Checkov by Prisma Cloud 3.2.53", "Checkov by Prisma Cloud 3.2.54", "Checkov by Prisma Cloud 3.2.55", "Checkov by Prisma Cloud 3.2.56", "Checkov by Prisma Cloud 3.2.57", "Checkov by Prisma Cloud 3.2.58", "Checkov by Prisma Cloud 3.2.59", "Checkov by Prisma Cloud 3.2.60", "Checkov by Prisma Cloud 3.2.61", "Checkov by Prisma Cloud 3.2.62", "Checkov by Prisma Cloud 3.2.63", "Checkov by Prisma Cloud 3.2.64", "Checkov by Prisma Cloud 3.2.65", "Checkov by Prisma Cloud 3.2.66", "Checkov by Prisma Cloud 3.2.67", "Checkov by Prisma Cloud 3.2.68", "Checkov by Prisma Cloud 3.2.69", "Checkov by Prisma Cloud 3.2.70", "Checkov by Prisma Cloud 3.2.71", "Checkov by Prisma Cloud 3.2.72", "Checkov by Prisma Cloud 3.2.73", "Checkov by Prisma Cloud 3.2.74", "Checkov by Prisma Cloud 3.2.75", "Checkov by Prisma Cloud 3.2.76", "Checkov by Prisma Cloud 3.2.77", "Checkov by Prisma Cloud 3.2.78", "Checkov by Prisma Cloud 3.2.79", "Checkov by Prisma Cloud 3.2.80", "Checkov by Prisma Cloud 3.2.81", "Checkov by Prisma Cloud 3.2.82", "Checkov by Prisma Cloud 3.2.83", "Checkov by Prisma Cloud 3.2.84", "Checkov by Prisma Cloud 3.2.85", "Checkov by Prisma Cloud 3.2.86", "Checkov by Prisma Cloud 3.2.87", "Checkov by Prisma Cloud 3.2.88", "Checkov by Prisma Cloud 3.2.89", "Checkov by Prisma Cloud 3.2.90", "Checkov by Prisma Cloud 3.2.91", "Checkov by Prisma Cloud 3.2.92", "Checkov by Prisma Cloud 3.2.93", "Checkov by Prisma Cloud 3.2.94", "Checkov by Prisma Cloud 3.2.95", "Checkov by Prisma Cloud 3.2.96", "Checkov by Prisma Cloud 3.2.97", "Checkov by Prisma Cloud 3.2.98", "Checkov by Prisma Cloud 3.2.99", "Checkov by Prisma Cloud 3.2.100", "Checkov by Prisma Cloud 3.2.101", "Checkov by Prisma Cloud 3.2.102", "Checkov by Prisma Cloud 3.2.103", "Checkov by Prisma Cloud 3.2.104", "Checkov by Prisma Cloud 3.2.105", "Checkov by Prisma Cloud 3.2.106", "Checkov by Prisma Cloud 3.2.107", "Checkov by Prisma Cloud 3.2.108", "Checkov by Prisma Cloud 3.2.109", "Checkov by Prisma Cloud 3.2.110", "Checkov by Prisma Cloud 3.2.111", "Checkov by Prisma Cloud 3.2.112", "Checkov by Prisma Cloud 3.2.113", "Checkov by Prisma Cloud 3.2.114", "Checkov by Prisma Cloud 3.2.115", "Checkov by Prisma Cloud 3.2.116", "Checkov by Prisma Cloud 3.2.117", "Checkov by Prisma Cloud 3.2.118", "Checkov by Prisma Cloud 3.2.119", "Checkov by Prisma Cloud 3.2.120", "Checkov by Prisma Cloud 3.2.121", "Checkov by Prisma Cloud 3.2.122", "Checkov by Prisma Cloud 3.2.123", "Checkov by Prisma Cloud 3.2.124", "Checkov by Prisma Cloud 3.2.125", "Checkov by Prisma Cloud 3.2.126", "Checkov by Prisma Cloud 3.2.127", "Checkov by Prisma Cloud 3.2.128", "Checkov by Prisma Cloud 3.2.129", "Checkov by Prisma Cloud 3.2.130", "Checkov by Prisma Cloud 3.2.131", "Checkov by Prisma Cloud 3.2.132", "Checkov by Prisma Cloud 3.2.133", "Checkov by Prisma Cloud 3.2.134", "Checkov by Prisma Cloud 3.2.135", "Checkov by Prisma Cloud 3.2.136", "Checkov by Prisma Cloud 3.2.137", "Checkov by Prisma Cloud 3.2.138", "Checkov by Prisma Cloud 3.2.139", "Checkov by Prisma Cloud 3.2.140", "Checkov by Prisma Cloud 3.2.141", "Checkov by Prisma Cloud 3.2.142", "Checkov by Prisma Cloud 3.2.143", "Checkov by Prisma Cloud 3.2.144", "Checkov by Prisma Cloud 3.2.145", "Checkov by Prisma Cloud 3.2.146", "Checkov by Prisma Cloud 3.2.147", "Checkov by Prisma Cloud 3.2.148", "Checkov by Prisma Cloud 3.2.149", "Checkov by Prisma Cloud 3.2.150", "Checkov by Prisma Cloud 3.2.151", "Checkov by Prisma Cloud 3.2.152", "Checkov by Prisma Cloud 3.2.153", "Checkov by Prisma Cloud 3.2.154", "Checkov by Prisma Cloud 3.2.155", "Checkov by Prisma Cloud 3.2.156", "Checkov by Prisma Cloud 3.2.157", "Checkov by Prisma Cloud 3.2.158", "Checkov by Prisma Cloud 3.2.159", "Checkov by Prisma Cloud 3.2.160", "Checkov by Prisma Cloud 3.2.161", "Checkov by Prisma Cloud 3.2.162", "Checkov by Prisma Cloud 3.2.163", "Checkov by Prisma Cloud 3.2.164", "Checkov by Prisma Cloud 3.2.165", "Checkov by Prisma Cloud 3.2.166", "Checkov by Prisma Cloud 3.2.167", "Checkov by Prisma Cloud 3.2.168", "Checkov by Prisma Cloud 3.2.169", "Checkov by Prisma Cloud 3.2.170", "Checkov by Prisma Cloud 3.2.171", "Checkov by Prisma Cloud 3.2.172", "Checkov by Prisma Cloud 3.2.173", "Checkov by Prisma Cloud 3.2.174", "Checkov by Prisma Cloud 3.2.175", "Checkov by Prisma Cloud 3.2.176", "Checkov by Prisma Cloud 3.2.177", "Checkov by Prisma Cloud 3.2.178", "Checkov by Prisma Cloud 3.2.179", "Checkov by Prisma Cloud 3.2.180", "Checkov by Prisma Cloud 3.2.181", "Checkov by Prisma Cloud 3.2.182", "Checkov by Prisma Cloud 3.2.183", "Checkov by Prisma Cloud 3.2.184", "Checkov by Prisma Cloud 3.2.185", "Checkov by Prisma Cloud 3.2.186", "Checkov by Prisma Cloud 3.2.187", "Checkov by Prisma Cloud 3.2.188", "Checkov by Prisma Cloud 3.2.189", "Checkov by Prisma Cloud 3.2.190", "Checkov by Prisma Cloud 3.2.191", "Checkov by Prisma Cloud 3.2.192", "Checkov by Prisma Cloud 3.2.193", "Checkov by Prisma Cloud 3.2.194", "Checkov by Prisma Cloud 3.2.195", "Checkov by Prisma Cloud 3.2.196", "Checkov by Prisma Cloud 3.2.197", "Checkov by Prisma Cloud 3.2.198", "Checkov by Prisma Cloud 3.2.199", "Checkov by Prisma Cloud 3.2.200", "Checkov by Prisma Cloud 3.2.201", "Checkov by Prisma Cloud 3.2.202", "Checkov by Prisma Cloud 3.2.203", "Checkov by Prisma Cloud 3.2.204", "Checkov by Prisma Cloud 3.2.205", "Checkov by Prisma Cloud 3.2.206", "Checkov by Prisma Cloud 3.2.207", "Checkov by Prisma Cloud 3.2.208", "Checkov by Prisma Cloud 3.2.209", "Checkov by Prisma Cloud 3.2.210", "Checkov by Prisma Cloud 3.2.211", "Checkov by Prisma Cloud 3.2.212", "Checkov by Prisma Cloud 3.2.213", "Checkov by Prisma Cloud 3.2.214", "Checkov by Prisma Cloud 3.2.215", "Checkov by Prisma Cloud 3.2.216", "Checkov by Prisma Cloud 3.2.217", "Checkov by Prisma Cloud 3.2.218", "Checkov by Prisma Cloud 3.2.219", "Checkov by Prisma Cloud 3.2.220", "Checkov by Prisma Cloud 3.2.221", "Checkov by Prisma Cloud 3.2.222", "Checkov by Prisma Cloud 3.2.223", "Checkov by Prisma Cloud 3.2.224", "Checkov by Prisma Cloud 3.2.225", "Checkov by Prisma Cloud 3.2.226", "Checkov by Prisma Cloud 3.2.227", "Checkov by Prisma Cloud 3.2.228", "Checkov by Prisma Cloud 3.2.229", "Checkov by Prisma Cloud 3.2.230", "Checkov by Prisma Cloud 3.2.231", "Checkov by Prisma Cloud 3.2.232", "Checkov by Prisma Cloud 3.2.233", "Checkov by Prisma Cloud 3.2.234", "Checkov by Prisma Cloud 3.2.235", "Checkov by Prisma Cloud 3.2.236", "Checkov by Prisma Cloud 3.2.237", "Checkov by Prisma Cloud 3.2.238", "Checkov by Prisma Cloud 3.2.239", "Checkov by Prisma Cloud 3.2.240", "Checkov by Prisma Cloud 3.2.241", "Checkov by Prisma Cloud 3.2.242", "Checkov by Prisma Cloud 3.2.243", "Checkov by Prisma Cloud 3.2.244", "Checkov by Prisma Cloud 3.2.245", "Checkov by Prisma Cloud 3.2.246", "Checkov by Prisma Cloud 3.2.247", "Checkov by Prisma Cloud 3.2.248", "Checkov by Prisma Cloud 3.2.249", "Checkov by Prisma Cloud 3.2.250", "Checkov by Prisma Cloud 3.2.251", "Checkov by Prisma Cloud 3.2.252", "Checkov by Prisma Cloud 3.2.253", "Checkov by Prisma Cloud 3.2.254", "Checkov by Prisma Cloud 3.2.255", "Checkov by Prisma Cloud 3.2.256", "Checkov by Prisma Cloud 3.2.257", "Checkov by Prisma Cloud 3.2.258", "Checkov by Prisma Cloud 3.2.259", "Checkov by Prisma Cloud 3.2.260", "Checkov by Prisma Cloud 3.2.261", "Checkov by Prisma Cloud 3.2.262", "Checkov by Prisma Cloud 3.2.263", "Checkov by Prisma Cloud 3.2.264", "Checkov by Prisma Cloud 3.2.265", "Checkov by Prisma Cloud 3.2.266", "Checkov by Prisma Cloud 3.2.267", "Checkov by Prisma Cloud 3.2.268", "Checkov by Prisma Cloud 3.2.269", "Checkov by Prisma Cloud 3.2.270", "Checkov by Prisma Cloud 3.2.271", "Checkov by Prisma Cloud 3.2.272", "Checkov by Prisma Cloud 3.2.273", "Checkov by Prisma Cloud 3.2.274", "Checkov by Prisma Cloud 3.2.275", "Checkov by Prisma Cloud 3.2.276", "Checkov by Prisma Cloud 3.2.277", "Checkov by Prisma Cloud 3.2.278", "Checkov by Prisma Cloud 3.2.279", "Checkov by Prisma Cloud 3.2.280", "Checkov by Prisma Cloud 3.2.281", "Checkov by Prisma Cloud 3.2.282", "Checkov by Prisma Cloud 3.2.283", "Checkov by Prisma Cloud 3.2.284", "Checkov by Prisma Cloud 3.2.285", "Checkov by Prisma Cloud 3.2.286", "Checkov by Prisma Cloud 3.2.287", "Checkov by Prisma Cloud 3.2.288", "Checkov by Prisma Cloud 3.2.289", "Checkov by Prisma Cloud 3.2.290", "Checkov by Prisma Cloud 3.2.291", "Checkov by Prisma Cloud 3.2.292", "Checkov by Prisma Cloud 3.2.293", "Checkov by Prisma Cloud 3.2.294", "Checkov by Prisma Cloud 3.2.295", "Checkov by Prisma Cloud 3.2.296", "Checkov by Prisma Cloud 3.2.297", "Checkov by Prisma Cloud 3.2.298", "Checkov by Prisma Cloud 3.2.299", "Checkov by Prisma Cloud 3.2.300", "Checkov by Prisma Cloud 3.2.301", "Checkov by Prisma Cloud 3.2.302", "Checkov by Prisma Cloud 3.2.303", "Checkov by Prisma Cloud 3.2.304", "Checkov by Prisma Cloud 3.2.305", "Checkov by Prisma Cloud 3.2.306", "Checkov by Prisma Cloud 3.2.307", "Checkov by Prisma Cloud 3.2.308", "Checkov by Prisma Cloud 3.2.309", "Checkov by Prisma Cloud 3.2.310", "Checkov by Prisma Cloud 3.2.311", "Checkov by Prisma Cloud 3.2.312", "Checkov by Prisma Cloud 3.2.313", "Checkov by Prisma Cloud 3.2.314", "Checkov by Prisma Cloud 3.2.315", "Checkov by Prisma Cloud 3.2.316", "Checkov by Prisma Cloud 3.2.317", "Checkov by Prisma Cloud 3.2.318", "Checkov by Prisma Cloud 3.2.319", "Checkov by Prisma Cloud 3.2.320", "Checkov by Prisma Cloud 3.2.321", "Checkov by Prisma Cloud 3.2.322", "Checkov by Prisma Cloud 3.2.323", "Checkov by Prisma Cloud 3.2.324", "Checkov by Prisma Cloud 3.2.325", "Checkov by Prisma Cloud 3.2.326", "Checkov by Prisma Cloud 3.2.327", "Checkov by Prisma Cloud 3.2.328", "Checkov by Prisma Cloud 3.2.329", "Checkov by Prisma Cloud 3.2.330", "Checkov by Prisma Cloud 3.2.331", "Checkov by Prisma Cloud 3.2.332", "Checkov by Prisma Cloud 3.2.333", "Checkov by Prisma Cloud 3.2.334", "Checkov by Prisma Cloud 3.2.335", "Checkov by Prisma Cloud 3.2.336", "Checkov by Prisma Cloud 3.2.337", "Checkov by Prisma Cloud 3.2.338", "Checkov by Prisma Cloud 3.2.339", "Checkov by Prisma Cloud 3.2.340", "Checkov by Prisma Cloud 3.2.341", "Checkov by Prisma Cloud 3.2.342", "Checkov by Prisma Cloud 3.2.343", "Checkov by Prisma Cloud 3.2.344", "Checkov by Prisma Cloud 3.2.345", "Checkov by Prisma Cloud 3.2.346", "Checkov by Prisma Cloud 3.2.347", "Checkov by Prisma Cloud 3.2.348", "Checkov by Prisma Cloud 3.2.349", "Checkov by Prisma Cloud 3.2.350", "Checkov by Prisma Cloud 3.2.351", "Checkov by Prisma Cloud 3.2.352", "Checkov by Prisma Cloud 3.2.353", "Checkov by Prisma Cloud 3.2.354", "Checkov by Prisma Cloud 3.2.355", "Checkov by Prisma Cloud 3.2.356", "Checkov by Prisma Cloud 3.2.357", "Checkov by Prisma Cloud 3.2.358", "Checkov by Prisma Cloud 3.2.359", "Checkov by Prisma Cloud 3.2.360", "Checkov by Prisma Cloud 3.2.361", "Checkov by Prisma Cloud 3.2.362", "Checkov by Prisma Cloud 3.2.363", "Checkov by Prisma Cloud 3.2.364", "Checkov by Prisma Cloud 3.2.365", "Checkov by Prisma Cloud 3.2.366", "Checkov by Prisma Cloud 3.2.367", "Checkov by Prisma Cloud 3.2.368", "Checkov by Prisma Cloud 3.2.369", "Checkov by Prisma Cloud 3.2.370", "Checkov by Prisma Cloud 3.2.371", "Checkov by Prisma Cloud 3.2.372", "Checkov by Prisma Cloud 3.2.373", "Checkov by Prisma Cloud 3.2.374", "Checkov by Prisma Cloud 3.2.375", "Checkov by Prisma Cloud 3.2.376", "Checkov by Prisma Cloud 3.2.377", "Checkov by Prisma Cloud 3.2.378", "Checkov by Prisma Cloud 3.2.379", "Checkov by Prisma Cloud 3.2.380", "Checkov by Prisma Cloud 3.2.381", "Checkov by Prisma Cloud 3.2.382", "Checkov by Prisma Cloud 3.2.383", "Checkov by Prisma Cloud 3.2.384", "Checkov by Prisma Cloud 3.2.385", "Checkov by Prisma Cloud 3.2.386", "Checkov by Prisma Cloud 3.2.387", "Checkov by Prisma Cloud 3.2.388", "Checkov by Prisma Cloud 3.2.389", "Checkov by Prisma Cloud 3.2.390", "Checkov by Prisma Cloud 3.2.391", "Checkov by Prisma Cloud 3.2.392", "Checkov by Prisma Cloud 3.2.393", "Checkov by Prisma Cloud 3.2.394", "Checkov by Prisma Cloud 3.2.395", "Checkov by Prisma Cloud 3.2.396", "Checkov by Prisma Cloud 3.2.397", "Checkov by Prisma Cloud 3.2.398", "Checkov by Prisma Cloud 3.2.399", "Checkov by Prisma Cloud 3.2.400", "Checkov by Prisma Cloud 3.2.401", "Checkov by Prisma Cloud 3.2.402", "Checkov by Prisma Cloud 3.2.403", "Checkov by Prisma Cloud 3.2.404", "Checkov by Prisma Cloud 3.2.405", "Checkov by Prisma Cloud 3.2.406", "Checkov by Prisma Cloud 3.2.407", "Checkov by Prisma Cloud 3.2.408", "Checkov by Prisma Cloud 3.2.409", "Checkov by Prisma Cloud 3.2.410", "Checkov by Prisma Cloud 3.2.411", "Checkov by Prisma Cloud 3.2.412", "Checkov by Prisma Cloud 3.2.413", "Checkov by Prisma Cloud 3.2.414", "Checkov by Prisma Cloud 3.2.415", "Checkov by Prisma Cloud 3.2.416", "Checkov by Prisma Cloud 3.2.417", "Checkov by Prisma Cloud 3.2.418", "Checkov by Prisma Cloud 3.2.419", "Checkov by Prisma Cloud 3.2.420", "Checkov by Prisma Cloud 3.2.421", "Checkov by Prisma Cloud 3.2.422", "Checkov by Prisma Cloud 3.2.423", "Checkov by Prisma Cloud 3.2.424", "Checkov by Prisma Cloud 3.2.425", "Checkov by Prisma Cloud 3.2.426", "Checkov by Prisma Cloud 3.2.427", "Checkov by Prisma Cloud 3.2.428", "Checkov by Prisma Cloud 3.2.429", "Checkov by Prisma Cloud 3.2.430", "Checkov by Prisma Cloud 3.2.431", "Checkov by Prisma Cloud 3.2.432", "Checkov by Prisma Cloud 3.2.433", "Checkov by Prisma Cloud 3.2.434", "Checkov by Prisma Cloud 3.2.435", "Checkov by Prisma Cloud 3.2.436", "Checkov by Prisma Cloud 3.2.437", "Checkov by Prisma Cloud 3.2.438", "Checkov by Prisma Cloud 3.2.439", "Checkov by Prisma Cloud 3.2.440", "Checkov by Prisma Cloud 3.2.441", "Checkov by Prisma Cloud 3.2.442", "Checkov by Prisma Cloud 3.2.443", "Checkov by Prisma Cloud 3.2.444", "Checkov by Prisma Cloud 3.2.445", "Checkov by Prisma Cloud 3.2.446", "Checkov by Prisma Cloud 3.2.447", "Checkov by Prisma Cloud 3.2.448", "Checkov by Prisma Cloud 3.2.449", "Checkov by Prisma Cloud 3.2.450", "Checkov by Prisma Cloud 3.2.451", "Checkov by Prisma Cloud 3.2.452", "Checkov by Prisma Cloud 3.2.453", "Checkov by Prisma Cloud 3.2.454", "Checkov by Prisma Cloud 3.2.455", "Checkov by Prisma Cloud 3.2.456", "Checkov by Prisma Cloud 3.2.457", "Checkov by Prisma Cloud 3.2.458", "Checkov by Prisma Cloud 3.2.459", "Checkov by Prisma Cloud 3.2.460", "Checkov by Prisma Cloud 3.2.461", "Checkov by Prisma Cloud 3.2.462", "Checkov by Prisma Cloud 3.2.463", "Checkov by Prisma Cloud 3.2.464", "Checkov by Prisma Cloud 3.2.465", "Checkov by Prisma Cloud 3.2.466", "Checkov by Prisma Cloud 3.2.467", "Checkov by Prisma Cloud 3.2.468", "Checkov by Prisma Cloud 3.2.469", "Checkov by Prisma Cloud 3.2.470", "Checkov by Prisma Cloud 3.2.471", "Checkov by Prisma Cloud 3.2.472", "Checkov by Prisma Cloud 3.2.473", "Checkov by Prisma Cloud 3.2.474", "Checkov by Prisma Cloud 3.2.475", "Checkov by Prisma Cloud 3.2.476", "Checkov by Prisma Cloud 3.2.477", "Checkov by Prisma Cloud 3.2.478", "Checkov by Prisma Cloud 3.2.479", "Checkov by Prisma Cloud 3.2.480", "Checkov by Prisma Cloud 3.2.481", "Checkov by Prisma Cloud 3.2.482", "Checkov by Prisma Cloud 3.2.483", "Checkov by Prisma Cloud 3.2.484", "Checkov by Prisma Cloud 3.2.485", "Checkov by Prisma Cloud 3.2.486", "Checkov by Prisma Cloud 3.2.487", "Checkov by Prisma Cloud 3.2.488", "Checkov by Prisma Cloud 3.2.489", "Checkov by Prisma Cloud 3.2.490", "Checkov by Prisma Cloud 3.2.491", "Checkov by Prisma Cloud 3.2.492", "Checkov by Prisma Cloud 3.2.493", "Checkov by Prisma Cloud 3.2.494", "Checkov by Prisma Cloud 3.2.495", "Checkov by Prisma Cloud 3.2.496", "Checkov by Prisma Cloud 3.2.497", "Checkov by Prisma Cloud 3.2.498", "Checkov by Prisma Cloud 3.2.499", "Checkov by Prisma Cloud 3.2.500", "Checkov by Prisma Cloud 3.2.501", "Checkov by Prisma Cloud 3.2.502", "Checkov by Prisma Cloud 3.2.503", "Checkov by Prisma Cloud 3.2.504", "Checkov by Prisma Cloud 3.2.505", "Checkov by Prisma Cloud 3.2.506", "Checkov by Prisma Cloud 3.2.507", "Checkov by Prisma Cloud 3.2.508", "Checkov by Prisma Cloud 3.2.509", "Checkov by Prisma Cloud 3.2.510", "Checkov by Prisma Cloud 3.2.511", "Checkov by Prisma Cloud 3.2.512", "Checkov by Prisma Cloud 3.2.513", "Checkov by Prisma Cloud 3.2.514", "Checkov by Prisma Cloud 3.2.515", "Checkov by Prisma Cloud 3.2.516", "Checkov by Prisma Cloud 3.2.517", "Checkov by Prisma Cloud 3.2.518", "Checkov by Prisma Cloud 3.2.519", "Checkov by Prisma Cloud 3.2.520", "Checkov by Prisma Cloud 3.2.521", "Checkov by Prisma Cloud 3.2.522", "Checkov by Prisma Cloud 3.2.523", "Checkov by Prisma Cloud 3.2.524", "Checkov by Prisma Cloud 3.2.525", "Checkov by Prisma Cloud 3.2.526", "Checkov by Prisma Cloud 3.2.527", "Checkov by Prisma Cloud 3.2.528", "Checkov by Prisma Cloud 3.2.529", "Checkov by Prisma Cloud 3.2.530", "Checkov by Prisma Cloud 3.2.531"], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "3.2.532", "versionStartIncluding": "3.2.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-09-10T06:03:50.513Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0303", "state": "PUBLISHED", "dateUpdated": "2026-09-10T13:01:27.361Z", "dateReserved": "2025-11-03T20:45:01.388Z", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "datePublished": "2026-09-10T06:03:50.513Z", "assignerShortName": "palo_alto"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Checkov by Prisma Cloud", "vendor": "Palo Alto Networks", "versions": [{"changes": [{"at": "3.2.532", "status": "unaffected"}], "lessThan": "3.2.532", "status": "affected", "version": "3.2.0", "versionType": "custom"}]}], "source": "psirt@paloaltonetworks.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."}], "id": "CVE-2026-0303", "lastModified": "2026-09-10T14:50:07.813", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "PASSIVE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "MODERATE"}, "source": "psirt@paloaltonetworks.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0303", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-10T13:01:15.631812Z", "version": "2.0.3"}}]}, "published": "2026-09-10T07:17:02.140", "references": [{"source": "psirt@paloaltonetworks.com", "url": "https://security.paloaltonetworks.com/CVE-2026-0303"}], "sourceIdentifier": "psirt@paloaltonetworks.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-829"}], "source": "psirt@paloaltonetworks.com", "type": "Secondary"}]}

{}

{"created": "2026-09-10T07:30:07.679731+00:00", "updated": "2026-09-10T07:30:07.679737+00:00", "vendors": []}