{"api_version":"1","generated_at":"2026-09-10T09:12:23+00:00","cve":"CVE-2026-0302","urls":{"html":"https://cve.report/CVE-2026-0302","api":"https://cve.report/api/cve/CVE-2026-0302.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-0302","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-0302"},"summary":{"title":"Checkov by Prisma Cloud: OS Command Injection Vulnerability","description":"An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.","state":"PUBLISHED","assigner":"palo_alto","published_at":"2026-09-10 07:17:00","updated_at":"2026-09-10 07:17:00"},"problem_types":["CWE-78","CWE-78 CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"],"metrics":[{"version":"4.0","source":"psirt@paloaltonetworks.com","type":"Secondary","score":"1.1","severity":"LOW","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","baseScore":1.1,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER"}},{"version":"4.0","source":"CNA","type":"CVSS","score":"1.1","severity":"LOW","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber","data":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":1.1,"baseSeverity":"LOW","exploitMaturity":"UNREPORTED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"PASSIVE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"}}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0302","name":"https://security.paloaltonetworks.com/CVE-2026-0302","refsource":"psirt@paloaltonetworks.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0302","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0302","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Palo Alto Networks","product":"Checkov by Prisma Cloud","version":"affected 3.2.0 3.2.502 custom","platforms":[]}],"timeline":[{"source":"CNA","time":"2026-09-09T16:00:00.000Z","lang":"en","value":"Initial Publication"}],"solutions":[{"source":"CNA","title":"","value":"Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.501\n Upgrade to 3.2.502 or later.","time":"","lang":"eng"}],"workarounds":[{"source":"CNA","title":"","value":"No known workarounds exist for this issue.","time":"","lang":"eng"}],"exploits":[{"source":"CNA","title":"","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue.","time":"","lang":"en"}],"credits":[{"source":"CNA","value":"George Gherasim","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Checkov by Prisma Cloud","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"3.2.502","status":"unaffected"}],"lessThan":"3.2.502","status":"affected","version":"3.2.0","versionType":"custom"}]}],"configurations":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"No special configuration is required to be affected by this issue. "}],"value":"No special configuration is required to be affected by this issue."}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.502","versionStartIncluding":"3.2.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"George Gherasim"}],"datePublic":"2026-09-09T16:00:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

"}],"value":"An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov."}],"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue. "}],"value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"impacts":[{"capecId":"CAPEC-88","descriptions":[{"lang":"en","value":"CAPEC-88 OS Command Injection"}]}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":1.1,"baseSeverity":"LOW","exploitMaturity":"UNREPORTED","privilegesRequired":"LOW","providerUrgency":"AMBER","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"PASSIVE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"format":"CVSS","scenarios":[{"lang":"en","value":"If the user is able to influence input consumed by a Checkov scan."}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-10T06:05:20.011Z","orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","shortName":"palo_alto"},"references":[{"tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0302"}],"solutions":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"\n \n \n \n
Version
Minor Version
Suggested Solution
Checkov by Prisma Cloud 3.2
3.2.0 through 3.2.501Upgrade to 3.2.502 or later.
"}],"value":"Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.501\n Upgrade to 3.2.502 or later."}],"source":{"discovery":"EXTERNAL"},"timeline":[{"lang":"en","time":"2026-09-09T16:00:00.000Z","value":"Initial Publication"}],"title":"Checkov by Prisma Cloud: OS Command Injection Vulnerability","workarounds":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"No known workarounds exist for this issue."}],"value":"No known workarounds exist for this issue."}],"x_affectedList":["Checkov by Prisma Cloud 3.2.0","Checkov by Prisma Cloud 3.2.1","Checkov by Prisma Cloud 3.2.2","Checkov by Prisma Cloud 3.2.3","Checkov by Prisma Cloud 3.2.4","Checkov by Prisma Cloud 3.2.5","Checkov by Prisma Cloud 3.2.6","Checkov by Prisma Cloud 3.2.7","Checkov by Prisma Cloud 3.2.8","Checkov by Prisma Cloud 3.2.9","Checkov by Prisma Cloud 3.2.10","Checkov by Prisma Cloud 3.2.11","Checkov by Prisma Cloud 3.2.12","Checkov by Prisma Cloud 3.2.13","Checkov by Prisma Cloud 3.2.14","Checkov by Prisma Cloud 3.2.15","Checkov by Prisma Cloud 3.2.16","Checkov by Prisma Cloud 3.2.17","Checkov by Prisma Cloud 3.2.18","Checkov by Prisma Cloud 3.2.19","Checkov by Prisma Cloud 3.2.20","Checkov by Prisma Cloud 3.2.21","Checkov by Prisma Cloud 3.2.22","Checkov by Prisma Cloud 3.2.23","Checkov by Prisma Cloud 3.2.24","Checkov by Prisma Cloud 3.2.25","Checkov by Prisma Cloud 3.2.26","Checkov by Prisma Cloud 3.2.27","Checkov by Prisma Cloud 3.2.28","Checkov by Prisma Cloud 3.2.29","Checkov by Prisma Cloud 3.2.30","Checkov by Prisma Cloud 3.2.31","Checkov by Prisma Cloud 3.2.32","Checkov by Prisma Cloud 3.2.33","Checkov by Prisma Cloud 3.2.34","Checkov by Prisma Cloud 3.2.35","Checkov by Prisma Cloud 3.2.36","Checkov by Prisma Cloud 3.2.37","Checkov by Prisma Cloud 3.2.38","Checkov by Prisma Cloud 3.2.39","Checkov by Prisma Cloud 3.2.40","Checkov by Prisma Cloud 3.2.41","Checkov by Prisma Cloud 3.2.42","Checkov by Prisma Cloud 3.2.43","Checkov by Prisma Cloud 3.2.44","Checkov by Prisma Cloud 3.2.45","Checkov by Prisma Cloud 3.2.46","Checkov by Prisma Cloud 3.2.47","Checkov by Prisma Cloud 3.2.48","Checkov by Prisma Cloud 3.2.49","Checkov by Prisma Cloud 3.2.50","Checkov by Prisma Cloud 3.2.51","Checkov by Prisma Cloud 3.2.52","Checkov by Prisma Cloud 3.2.53","Checkov by Prisma Cloud 3.2.54","Checkov by Prisma Cloud 3.2.55","Checkov by Prisma Cloud 3.2.56","Checkov by Prisma Cloud 3.2.57","Checkov by Prisma Cloud 3.2.58","Checkov by Prisma Cloud 3.2.59","Checkov by Prisma Cloud 3.2.60","Checkov by Prisma Cloud 3.2.61","Checkov by Prisma Cloud 3.2.62","Checkov by Prisma Cloud 3.2.63","Checkov by Prisma Cloud 3.2.64","Checkov by Prisma Cloud 3.2.65","Checkov by Prisma Cloud 3.2.66","Checkov by Prisma Cloud 3.2.67","Checkov by Prisma Cloud 3.2.68","Checkov by Prisma Cloud 3.2.69","Checkov by Prisma Cloud 3.2.70","Checkov by Prisma Cloud 3.2.71","Checkov by Prisma Cloud 3.2.72","Checkov by Prisma Cloud 3.2.73","Checkov by Prisma Cloud 3.2.74","Checkov by Prisma Cloud 3.2.75","Checkov by Prisma Cloud 3.2.76","Checkov by Prisma Cloud 3.2.77","Checkov by Prisma Cloud 3.2.78","Checkov by Prisma Cloud 3.2.79","Checkov by Prisma Cloud 3.2.80","Checkov by Prisma Cloud 3.2.81","Checkov by Prisma Cloud 3.2.82","Checkov by Prisma Cloud 3.2.83","Checkov by Prisma Cloud 3.2.84","Checkov by Prisma Cloud 3.2.85","Checkov by Prisma Cloud 3.2.86","Checkov by Prisma Cloud 3.2.87","Checkov by Prisma Cloud 3.2.88","Checkov by Prisma Cloud 3.2.89","Checkov by Prisma Cloud 3.2.90","Checkov by Prisma Cloud 3.2.91","Checkov by Prisma Cloud 3.2.92","Checkov by Prisma Cloud 3.2.93","Checkov by Prisma Cloud 3.2.94","Checkov by Prisma Cloud 3.2.95","Checkov by Prisma Cloud 3.2.96","Checkov by Prisma Cloud 3.2.97","Checkov by Prisma Cloud 3.2.98","Checkov by Prisma Cloud 3.2.99","Checkov by Prisma Cloud 3.2.100","Checkov by Prisma Cloud 3.2.101","Checkov by Prisma Cloud 3.2.102","Checkov by Prisma Cloud 3.2.103","Checkov by Prisma Cloud 3.2.104","Checkov by Prisma Cloud 3.2.105","Checkov by Prisma Cloud 3.2.106","Checkov by Prisma Cloud 3.2.107","Checkov by Prisma Cloud 3.2.108","Checkov by Prisma Cloud 3.2.109","Checkov by Prisma Cloud 3.2.110","Checkov by Prisma Cloud 3.2.111","Checkov by Prisma Cloud 3.2.112","Checkov by Prisma Cloud 3.2.113","Checkov by Prisma Cloud 3.2.114","Checkov by Prisma Cloud 3.2.115","Checkov by Prisma Cloud 3.2.116","Checkov by Prisma Cloud 3.2.117","Checkov by Prisma Cloud 3.2.118","Checkov by Prisma Cloud 3.2.119","Checkov by Prisma Cloud 3.2.120","Checkov by Prisma Cloud 3.2.121","Checkov by Prisma Cloud 3.2.122","Checkov by Prisma Cloud 3.2.123","Checkov by Prisma Cloud 3.2.124","Checkov by Prisma Cloud 3.2.125","Checkov by Prisma Cloud 3.2.126","Checkov by Prisma Cloud 3.2.127","Checkov by Prisma Cloud 3.2.128","Checkov by Prisma Cloud 3.2.129","Checkov by Prisma Cloud 3.2.130","Checkov by Prisma Cloud 3.2.131","Checkov by Prisma Cloud 3.2.132","Checkov by Prisma Cloud 3.2.133","Checkov by Prisma Cloud 3.2.134","Checkov by Prisma Cloud 3.2.135","Checkov by Prisma Cloud 3.2.136","Checkov by Prisma Cloud 3.2.137","Checkov by Prisma Cloud 3.2.138","Checkov by Prisma Cloud 3.2.139","Checkov by Prisma Cloud 3.2.140","Checkov by Prisma Cloud 3.2.141","Checkov by Prisma Cloud 3.2.142","Checkov by Prisma Cloud 3.2.143","Checkov by Prisma Cloud 3.2.144","Checkov by Prisma Cloud 3.2.145","Checkov by Prisma Cloud 3.2.146","Checkov by Prisma Cloud 3.2.147","Checkov by Prisma Cloud 3.2.148","Checkov by Prisma Cloud 3.2.149","Checkov by Prisma Cloud 3.2.150","Checkov by Prisma Cloud 3.2.151","Checkov by Prisma Cloud 3.2.152","Checkov by Prisma Cloud 3.2.153","Checkov by Prisma Cloud 3.2.154","Checkov by Prisma Cloud 3.2.155","Checkov by Prisma Cloud 3.2.156","Checkov by Prisma Cloud 3.2.157","Checkov by Prisma Cloud 3.2.158","Checkov by Prisma Cloud 3.2.159","Checkov by Prisma Cloud 3.2.160","Checkov by Prisma Cloud 3.2.161","Checkov by Prisma Cloud 3.2.162","Checkov by Prisma Cloud 3.2.163","Checkov by Prisma Cloud 3.2.164","Checkov by Prisma Cloud 3.2.165","Checkov by Prisma Cloud 3.2.166","Checkov by Prisma Cloud 3.2.167","Checkov by Prisma Cloud 3.2.168","Checkov by Prisma Cloud 3.2.169","Checkov by Prisma Cloud 3.2.170","Checkov by Prisma Cloud 3.2.171","Checkov by Prisma Cloud 3.2.172","Checkov by Prisma Cloud 3.2.173","Checkov by Prisma Cloud 3.2.174","Checkov by Prisma Cloud 3.2.175","Checkov by Prisma Cloud 3.2.176","Checkov by Prisma Cloud 3.2.177","Checkov by Prisma Cloud 3.2.178","Checkov by Prisma Cloud 3.2.179","Checkov by Prisma Cloud 3.2.180","Checkov by Prisma Cloud 3.2.181","Checkov by Prisma Cloud 3.2.182","Checkov by Prisma Cloud 3.2.183","Checkov by Prisma Cloud 3.2.184","Checkov by Prisma Cloud 3.2.185","Checkov by Prisma Cloud 3.2.186","Checkov by Prisma Cloud 3.2.187","Checkov by Prisma Cloud 3.2.188","Checkov by Prisma Cloud 3.2.189","Checkov by Prisma Cloud 3.2.190","Checkov by Prisma Cloud 3.2.191","Checkov by Prisma Cloud 3.2.192","Checkov by Prisma Cloud 3.2.193","Checkov by Prisma Cloud 3.2.194","Checkov by Prisma Cloud 3.2.195","Checkov by Prisma Cloud 3.2.196","Checkov by Prisma Cloud 3.2.197","Checkov by Prisma Cloud 3.2.198","Checkov by Prisma Cloud 3.2.199","Checkov by Prisma Cloud 3.2.200","Checkov by Prisma Cloud 3.2.201","Checkov by Prisma Cloud 3.2.202","Checkov by Prisma Cloud 3.2.203","Checkov by Prisma Cloud 3.2.204","Checkov by Prisma Cloud 3.2.205","Checkov by Prisma Cloud 3.2.206","Checkov by Prisma Cloud 3.2.207","Checkov by Prisma Cloud 3.2.208","Checkov by Prisma Cloud 3.2.209","Checkov by Prisma Cloud 3.2.210","Checkov by Prisma Cloud 3.2.211","Checkov by Prisma Cloud 3.2.212","Checkov by Prisma Cloud 3.2.213","Checkov by Prisma Cloud 3.2.214","Checkov by Prisma Cloud 3.2.215","Checkov by Prisma Cloud 3.2.216","Checkov by Prisma Cloud 3.2.217","Checkov by Prisma Cloud 3.2.218","Checkov by Prisma Cloud 3.2.219","Checkov by Prisma Cloud 3.2.220","Checkov by Prisma Cloud 3.2.221","Checkov by Prisma Cloud 3.2.222","Checkov by Prisma Cloud 3.2.223","Checkov by Prisma Cloud 3.2.224","Checkov by Prisma Cloud 3.2.225","Checkov by Prisma Cloud 3.2.226","Checkov by Prisma Cloud 3.2.227","Checkov by Prisma Cloud 3.2.228","Checkov by Prisma Cloud 3.2.229","Checkov by Prisma Cloud 3.2.230","Checkov by Prisma Cloud 3.2.231","Checkov by Prisma Cloud 3.2.232","Checkov by Prisma Cloud 3.2.233","Checkov by Prisma Cloud 3.2.234","Checkov by Prisma Cloud 3.2.235","Checkov by Prisma Cloud 3.2.236","Checkov by Prisma Cloud 3.2.237","Checkov by Prisma Cloud 3.2.238","Checkov by Prisma Cloud 3.2.239","Checkov by Prisma Cloud 3.2.240","Checkov by Prisma Cloud 3.2.241","Checkov by Prisma Cloud 3.2.242","Checkov by Prisma Cloud 3.2.243","Checkov by Prisma Cloud 3.2.244","Checkov by Prisma Cloud 3.2.245","Checkov by Prisma Cloud 3.2.246","Checkov by Prisma Cloud 3.2.247","Checkov by Prisma Cloud 3.2.248","Checkov by Prisma Cloud 3.2.249","Checkov by Prisma Cloud 3.2.250","Checkov by Prisma Cloud 3.2.251","Checkov by Prisma Cloud 3.2.252","Checkov by Prisma Cloud 3.2.253","Checkov by Prisma Cloud 3.2.254","Checkov by Prisma Cloud 3.2.255","Checkov by Prisma Cloud 3.2.256","Checkov by Prisma Cloud 3.2.257","Checkov by Prisma Cloud 3.2.258","Checkov by Prisma Cloud 3.2.259","Checkov by Prisma Cloud 3.2.260","Checkov by Prisma Cloud 3.2.261","Checkov by Prisma Cloud 3.2.262","Checkov by Prisma Cloud 3.2.263","Checkov by Prisma Cloud 3.2.264","Checkov by Prisma Cloud 3.2.265","Checkov by Prisma Cloud 3.2.266","Checkov by Prisma Cloud 3.2.267","Checkov by Prisma Cloud 3.2.268","Checkov by Prisma Cloud 3.2.269","Checkov by Prisma Cloud 3.2.270","Checkov by Prisma Cloud 3.2.271","Checkov by Prisma Cloud 3.2.272","Checkov by Prisma Cloud 3.2.273","Checkov by Prisma Cloud 3.2.274","Checkov by Prisma Cloud 3.2.275","Checkov by Prisma Cloud 3.2.276","Checkov by Prisma Cloud 3.2.277","Checkov by Prisma Cloud 3.2.278","Checkov by Prisma Cloud 3.2.279","Checkov by Prisma Cloud 3.2.280","Checkov by Prisma Cloud 3.2.281","Checkov by Prisma Cloud 3.2.282","Checkov by Prisma Cloud 3.2.283","Checkov by Prisma Cloud 3.2.284","Checkov by Prisma Cloud 3.2.285","Checkov by Prisma Cloud 3.2.286","Checkov by Prisma Cloud 3.2.287","Checkov by Prisma Cloud 3.2.288","Checkov by Prisma Cloud 3.2.289","Checkov by Prisma Cloud 3.2.290","Checkov by Prisma Cloud 3.2.291","Checkov by Prisma Cloud 3.2.292","Checkov by Prisma Cloud 3.2.293","Checkov by Prisma Cloud 3.2.294","Checkov by Prisma Cloud 3.2.295","Checkov by Prisma Cloud 3.2.296","Checkov by Prisma Cloud 3.2.297","Checkov by Prisma Cloud 3.2.298","Checkov by Prisma Cloud 3.2.299","Checkov by Prisma Cloud 3.2.300","Checkov by Prisma Cloud 3.2.301","Checkov by Prisma Cloud 3.2.302","Checkov by Prisma Cloud 3.2.303","Checkov by Prisma Cloud 3.2.304","Checkov by Prisma Cloud 3.2.305","Checkov by Prisma Cloud 3.2.306","Checkov by Prisma Cloud 3.2.307","Checkov by Prisma Cloud 3.2.308","Checkov by Prisma Cloud 3.2.309","Checkov by Prisma Cloud 3.2.310","Checkov by Prisma Cloud 3.2.311","Checkov by Prisma Cloud 3.2.312","Checkov by Prisma Cloud 3.2.313","Checkov by Prisma Cloud 3.2.314","Checkov by Prisma Cloud 3.2.315","Checkov by Prisma Cloud 3.2.316","Checkov by Prisma Cloud 3.2.317","Checkov by Prisma Cloud 3.2.318","Checkov by Prisma Cloud 3.2.319","Checkov by Prisma Cloud 3.2.320","Checkov by Prisma Cloud 3.2.321","Checkov by Prisma Cloud 3.2.322","Checkov by Prisma Cloud 3.2.323","Checkov by Prisma Cloud 3.2.324","Checkov by Prisma Cloud 3.2.325","Checkov by Prisma Cloud 3.2.326","Checkov by Prisma Cloud 3.2.327","Checkov by Prisma Cloud 3.2.328","Checkov by Prisma Cloud 3.2.329","Checkov by Prisma Cloud 3.2.330","Checkov by Prisma Cloud 3.2.331","Checkov by Prisma Cloud 3.2.332","Checkov by Prisma Cloud 3.2.333","Checkov by Prisma Cloud 3.2.334","Checkov by Prisma Cloud 3.2.335","Checkov by Prisma Cloud 3.2.336","Checkov by Prisma Cloud 3.2.337","Checkov by Prisma Cloud 3.2.338","Checkov by Prisma Cloud 3.2.339","Checkov by Prisma Cloud 3.2.340","Checkov by Prisma Cloud 3.2.341","Checkov by Prisma Cloud 3.2.342","Checkov by Prisma Cloud 3.2.343","Checkov by Prisma Cloud 3.2.344","Checkov by Prisma Cloud 3.2.345","Checkov by Prisma Cloud 3.2.346","Checkov by Prisma Cloud 3.2.347","Checkov by Prisma Cloud 3.2.348","Checkov by Prisma Cloud 3.2.349","Checkov by Prisma Cloud 3.2.350","Checkov by Prisma Cloud 3.2.351","Checkov by Prisma Cloud 3.2.352","Checkov by Prisma Cloud 3.2.353","Checkov by Prisma Cloud 3.2.354","Checkov by Prisma Cloud 3.2.355","Checkov by Prisma Cloud 3.2.356","Checkov by Prisma Cloud 3.2.357","Checkov by Prisma Cloud 3.2.358","Checkov by Prisma Cloud 3.2.359","Checkov by Prisma Cloud 3.2.360","Checkov by Prisma Cloud 3.2.361","Checkov by Prisma Cloud 3.2.362","Checkov by Prisma Cloud 3.2.363","Checkov by Prisma Cloud 3.2.364","Checkov by Prisma Cloud 3.2.365","Checkov by Prisma Cloud 3.2.366","Checkov by Prisma Cloud 3.2.367","Checkov by Prisma Cloud 3.2.368","Checkov by Prisma Cloud 3.2.369","Checkov by Prisma Cloud 3.2.370","Checkov by Prisma Cloud 3.2.371","Checkov by Prisma Cloud 3.2.372","Checkov by Prisma Cloud 3.2.373","Checkov by Prisma Cloud 3.2.374","Checkov by Prisma Cloud 3.2.375","Checkov by Prisma Cloud 3.2.376","Checkov by Prisma Cloud 3.2.377","Checkov by Prisma Cloud 3.2.378","Checkov by Prisma Cloud 3.2.379","Checkov by Prisma Cloud 3.2.380","Checkov by Prisma Cloud 3.2.381","Checkov by Prisma Cloud 3.2.382","Checkov by Prisma Cloud 3.2.383","Checkov by Prisma Cloud 3.2.384","Checkov by Prisma Cloud 3.2.385","Checkov by Prisma Cloud 3.2.386","Checkov by Prisma Cloud 3.2.387","Checkov by Prisma Cloud 3.2.388","Checkov by Prisma Cloud 3.2.389","Checkov by Prisma Cloud 3.2.390","Checkov by Prisma Cloud 3.2.391","Checkov by Prisma Cloud 3.2.392","Checkov by Prisma Cloud 3.2.393","Checkov by Prisma Cloud 3.2.394","Checkov by Prisma Cloud 3.2.395","Checkov by Prisma Cloud 3.2.396","Checkov by Prisma Cloud 3.2.397","Checkov by Prisma Cloud 3.2.398","Checkov by Prisma Cloud 3.2.399","Checkov by Prisma Cloud 3.2.400","Checkov by Prisma Cloud 3.2.401","Checkov by Prisma Cloud 3.2.402","Checkov by Prisma Cloud 3.2.403","Checkov by Prisma Cloud 3.2.404","Checkov by Prisma Cloud 3.2.405","Checkov by Prisma Cloud 3.2.406","Checkov by Prisma Cloud 3.2.407","Checkov by Prisma Cloud 3.2.408","Checkov by Prisma Cloud 3.2.409","Checkov by Prisma Cloud 3.2.410","Checkov by Prisma Cloud 3.2.411","Checkov by Prisma Cloud 3.2.412","Checkov by Prisma Cloud 3.2.413","Checkov by Prisma Cloud 3.2.414","Checkov by Prisma Cloud 3.2.415","Checkov by Prisma Cloud 3.2.416","Checkov by Prisma Cloud 3.2.417","Checkov by Prisma Cloud 3.2.418","Checkov by Prisma Cloud 3.2.419","Checkov by Prisma Cloud 3.2.420","Checkov by Prisma Cloud 3.2.421","Checkov by Prisma Cloud 3.2.422","Checkov by Prisma Cloud 3.2.423","Checkov by Prisma Cloud 3.2.424","Checkov by Prisma Cloud 3.2.425","Checkov by Prisma Cloud 3.2.426","Checkov by Prisma Cloud 3.2.427","Checkov by Prisma Cloud 3.2.428","Checkov by Prisma Cloud 3.2.429","Checkov by Prisma Cloud 3.2.430","Checkov by Prisma Cloud 3.2.431","Checkov by Prisma Cloud 3.2.432","Checkov by Prisma Cloud 3.2.433","Checkov by Prisma Cloud 3.2.434","Checkov by Prisma Cloud 3.2.435","Checkov by Prisma Cloud 3.2.436","Checkov by Prisma Cloud 3.2.437","Checkov by Prisma Cloud 3.2.438","Checkov by Prisma Cloud 3.2.439","Checkov by Prisma Cloud 3.2.440","Checkov by Prisma Cloud 3.2.441","Checkov by Prisma Cloud 3.2.442","Checkov by Prisma Cloud 3.2.443","Checkov by Prisma Cloud 3.2.444","Checkov by Prisma Cloud 3.2.445","Checkov by Prisma Cloud 3.2.446","Checkov by Prisma Cloud 3.2.447","Checkov by Prisma Cloud 3.2.448","Checkov by Prisma Cloud 3.2.449","Checkov by Prisma Cloud 3.2.450","Checkov by Prisma Cloud 3.2.451","Checkov by Prisma Cloud 3.2.452","Checkov by Prisma Cloud 3.2.453","Checkov by Prisma Cloud 3.2.454","Checkov by Prisma Cloud 3.2.455","Checkov by Prisma Cloud 3.2.456","Checkov by Prisma Cloud 3.2.457","Checkov by Prisma Cloud 3.2.458","Checkov by Prisma Cloud 3.2.459","Checkov by Prisma Cloud 3.2.460","Checkov by Prisma Cloud 3.2.461","Checkov by Prisma Cloud 3.2.462","Checkov by Prisma Cloud 3.2.463","Checkov by Prisma Cloud 3.2.464","Checkov by Prisma Cloud 3.2.465","Checkov by Prisma Cloud 3.2.466","Checkov by Prisma Cloud 3.2.467","Checkov by Prisma Cloud 3.2.468","Checkov by Prisma Cloud 3.2.469","Checkov by Prisma Cloud 3.2.470","Checkov by Prisma Cloud 3.2.471","Checkov by Prisma Cloud 3.2.472","Checkov by Prisma Cloud 3.2.473","Checkov by Prisma Cloud 3.2.474","Checkov by Prisma Cloud 3.2.475","Checkov by Prisma Cloud 3.2.476","Checkov by Prisma Cloud 3.2.477","Checkov by Prisma Cloud 3.2.478","Checkov by Prisma Cloud 3.2.479","Checkov by Prisma Cloud 3.2.480","Checkov by Prisma Cloud 3.2.481","Checkov by Prisma Cloud 3.2.482","Checkov by Prisma Cloud 3.2.483","Checkov by Prisma Cloud 3.2.484","Checkov by Prisma Cloud 3.2.485","Checkov by Prisma Cloud 3.2.486","Checkov by Prisma Cloud 3.2.487","Checkov by Prisma Cloud 3.2.488","Checkov by Prisma Cloud 3.2.489","Checkov by Prisma Cloud 3.2.490","Checkov by Prisma Cloud 3.2.491","Checkov by Prisma Cloud 3.2.492","Checkov by Prisma Cloud 3.2.493","Checkov by Prisma Cloud 3.2.494","Checkov by Prisma Cloud 3.2.495","Checkov by Prisma Cloud 3.2.496","Checkov by Prisma Cloud 3.2.497","Checkov by Prisma Cloud 3.2.498","Checkov by Prisma Cloud 3.2.499","Checkov by Prisma Cloud 3.2.500","Checkov by Prisma Cloud 3.2.501"],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}}},"cveMetadata":{"assignerOrgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","assignerShortName":"palo_alto","cveId":"CVE-2026-0302","datePublished":"2026-09-10T06:05:20.011Z","dateReserved":"2025-11-03T20:45:00.329Z","dateUpdated":"2026-09-10T06:05:20.011Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-10 07:17:00","lastModifiedDate":"2026-09-10 07:17:00","problem_types":["CWE-78","CWE-78 CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"],"metrics":{"cvssMetricV40":[{"source":"psirt@paloaltonetworks.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","baseScore":1.1,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"302","Ordinal":"1","Title":"Checkov by Prisma Cloud: OS Command Injection Vulnerability","CVE":"CVE-2026-0302","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"302","Ordinal":"1","NoteData":"An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.","Type":"Description","Title":"Checkov by Prisma Cloud: OS Command Injection Vulnerability"}]}}}