{"api_version":"1","generated_at":"2026-09-10T09:11:48+00:00","cve":"CVE-2026-0303","urls":{"html":"https://cve.report/CVE-2026-0303","api":"https://cve.report/api/cve/CVE-2026-0303.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-0303","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-0303"},"summary":{"title":"Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File","description":"A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.","state":"PUBLISHED","assigner":"palo_alto","published_at":"2026-09-10 07:17:02","updated_at":"2026-09-10 07:17:02"},"problem_types":["CWE-829","CWE-829 CWE-829 Inclusion of Functionality from Untrusted Control Sphere"],"metrics":[{"version":"4.0","source":"psirt@paloaltonetworks.com","type":"Secondary","score":"2.4","severity":"LOW","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","baseScore":2.4,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER"}},{"version":"4.0","source":"CNA","type":"CVSS","score":"2.4","severity":"LOW","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber","data":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":2.4,"baseSeverity":"LOW","exploitMaturity":"UNREPORTED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"PASSIVE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"}}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0303","name":"https://security.paloaltonetworks.com/CVE-2026-0303","refsource":"psirt@paloaltonetworks.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0303","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0303","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Palo Alto Networks","product":"Checkov by Prisma Cloud","version":"affected 3.2.0 3.2.532 custom","platforms":[]}],"timeline":[{"source":"CNA","time":"2026-09-09T16:00:00.000Z","lang":"en","value":"Initial Publication"}],"solutions":[{"source":"CNA","title":"","value":"Version\nMinor Version\nSuggested Solution\n\n                                Checkov by Prisma Cloud 3.2\n\n                                3.2.0 through 3.2.531\n                                Upgrade to 3.2.532or later.\n                            \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.","time":"","lang":"eng"}],"workarounds":[{"source":"CNA","title":"","value":"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.","time":"","lang":"eng"}],"exploits":[{"source":"CNA","title":"","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue.","time":"","lang":"en"}],"credits":[{"source":"CNA","value":"Michael Adedeji","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Checkov by Prisma Cloud","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"3.2.532","status":"unaffected"}],"lessThan":"3.2.532","status":"affected","version":"3.2.0","versionType":"custom"}]}],"configurations":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"<span>No special configuration is required to be vulnerable to this issue.</span>"}],"value":"No special configuration is required to be vulnerable to this issue."}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.532","versionStartIncluding":"3.2.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"Michael Adedeji"}],"datePublic":"2026-09-09T16:00:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.&nbsp;</p>"}],"value":"A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."}],"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue.&nbsp;"}],"value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"impacts":[{"capecId":"CAPEC-248","descriptions":[{"lang":"en","value":"CAPEC-248 Command Injection"}]}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":2.4,"baseSeverity":"LOW","exploitMaturity":"UNREPORTED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"PASSIVE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"format":"CVSS","scenarios":[{"lang":"en","value":"If the user scans infrastructure as code (IaC) files from untrusted sources."}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-829","description":"CWE-829 Inclusion of Functionality from Untrusted Control Sphere","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-09-10T06:03:50.513Z","orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","shortName":"palo_alto"},"references":[{"tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0303"}],"solutions":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"<table><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr>\n                                <td>Checkov by Prisma Cloud 3.2<br></td>\n                                <td>3.2.0 through 3.2.531</td>\n                                <td>Upgrade to 3.2.532or later.</td>\n                            </tr></tbody></table><br>Checkov integration in Prisma Cloud is upgraded automatically when new versions become available."}],"value":"Version\nMinor Version\nSuggested Solution\n\n                                Checkov by Prisma Cloud 3.2\n\n                                3.2.0 through 3.2.531\n                                Upgrade to 3.2.532or later.\n                            \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."}],"source":{"discovery":"EXTERNAL"},"timeline":[{"lang":"en","time":"2026-09-09T16:00:00.000Z","value":"Initial Publication"}],"title":"Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File","workarounds":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."}],"value":"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."}],"x_affectedList":["Checkov by Prisma Cloud 3.2.0","Checkov by Prisma Cloud 3.2.1","Checkov by Prisma Cloud 3.2.2","Checkov by Prisma Cloud 3.2.3","Checkov by Prisma Cloud 3.2.4","Checkov by Prisma Cloud 3.2.5","Checkov by Prisma Cloud 3.2.6","Checkov by Prisma Cloud 3.2.7","Checkov by Prisma Cloud 3.2.8","Checkov by Prisma Cloud 3.2.9","Checkov by Prisma Cloud 3.2.10","Checkov by Prisma Cloud 3.2.11","Checkov by Prisma Cloud 3.2.12","Checkov by Prisma Cloud 3.2.13","Checkov by Prisma Cloud 3.2.14","Checkov by Prisma Cloud 3.2.15","Checkov by Prisma Cloud 3.2.16","Checkov by Prisma Cloud 3.2.17","Checkov by Prisma Cloud 3.2.18","Checkov by Prisma Cloud 3.2.19","Checkov by Prisma Cloud 3.2.20","Checkov by Prisma Cloud 3.2.21","Checkov by Prisma Cloud 3.2.22","Checkov by Prisma Cloud 3.2.23","Checkov by Prisma Cloud 3.2.24","Checkov by Prisma Cloud 3.2.25","Checkov by Prisma Cloud 3.2.26","Checkov by Prisma Cloud 3.2.27","Checkov by Prisma Cloud 3.2.28","Checkov by Prisma Cloud 3.2.29","Checkov by Prisma Cloud 3.2.30","Checkov by Prisma Cloud 3.2.31","Checkov by Prisma Cloud 3.2.32","Checkov by Prisma Cloud 3.2.33","Checkov by Prisma Cloud 3.2.34","Checkov by Prisma Cloud 3.2.35","Checkov by Prisma Cloud 3.2.36","Checkov by Prisma Cloud 3.2.37","Checkov by Prisma Cloud 3.2.38","Checkov by Prisma Cloud 3.2.39","Checkov by Prisma Cloud 3.2.40","Checkov by Prisma Cloud 3.2.41","Checkov by Prisma Cloud 3.2.42","Checkov by Prisma Cloud 3.2.43","Checkov by Prisma Cloud 3.2.44","Checkov by Prisma Cloud 3.2.45","Checkov by Prisma Cloud 3.2.46","Checkov by Prisma Cloud 3.2.47","Checkov by Prisma Cloud 3.2.48","Checkov by Prisma Cloud 3.2.49","Checkov by Prisma Cloud 3.2.50","Checkov by Prisma Cloud 3.2.51","Checkov by Prisma Cloud 3.2.52","Checkov by Prisma Cloud 3.2.53","Checkov by Prisma Cloud 3.2.54","Checkov by Prisma Cloud 3.2.55","Checkov by Prisma Cloud 3.2.56","Checkov by Prisma Cloud 3.2.57","Checkov by Prisma Cloud 3.2.58","Checkov by Prisma Cloud 3.2.59","Checkov by Prisma Cloud 3.2.60","Checkov by Prisma Cloud 3.2.61","Checkov by Prisma Cloud 3.2.62","Checkov by Prisma Cloud 3.2.63","Checkov by Prisma Cloud 3.2.64","Checkov by Prisma Cloud 3.2.65","Checkov by Prisma Cloud 3.2.66","Checkov by Prisma Cloud 3.2.67","Checkov by Prisma Cloud 3.2.68","Checkov by Prisma Cloud 3.2.69","Checkov by Prisma Cloud 3.2.70","Checkov by Prisma Cloud 3.2.71","Checkov by Prisma Cloud 3.2.72","Checkov by Prisma Cloud 3.2.73","Checkov by Prisma Cloud 3.2.74","Checkov by Prisma Cloud 3.2.75","Checkov by Prisma Cloud 3.2.76","Checkov by Prisma Cloud 3.2.77","Checkov by Prisma Cloud 3.2.78","Checkov by Prisma Cloud 3.2.79","Checkov by Prisma Cloud 3.2.80","Checkov by Prisma Cloud 3.2.81","Checkov by Prisma Cloud 3.2.82","Checkov by Prisma Cloud 3.2.83","Checkov by Prisma Cloud 3.2.84","Checkov by Prisma Cloud 3.2.85","Checkov by Prisma Cloud 3.2.86","Checkov by Prisma Cloud 3.2.87","Checkov by Prisma Cloud 3.2.88","Checkov by Prisma Cloud 3.2.89","Checkov by Prisma Cloud 3.2.90","Checkov by Prisma Cloud 3.2.91","Checkov by Prisma Cloud 3.2.92","Checkov by Prisma Cloud 3.2.93","Checkov by Prisma Cloud 3.2.94","Checkov by Prisma Cloud 3.2.95","Checkov by Prisma Cloud 3.2.96","Checkov by Prisma Cloud 3.2.97","Checkov by Prisma Cloud 3.2.98","Checkov by Prisma Cloud 3.2.99","Checkov by Prisma Cloud 3.2.100","Checkov by Prisma Cloud 3.2.101","Checkov by Prisma Cloud 3.2.102","Checkov by Prisma Cloud 3.2.103","Checkov by Prisma Cloud 3.2.104","Checkov by Prisma Cloud 3.2.105","Checkov by Prisma Cloud 3.2.106","Checkov by Prisma Cloud 3.2.107","Checkov by Prisma Cloud 3.2.108","Checkov by Prisma Cloud 3.2.109","Checkov by Prisma Cloud 3.2.110","Checkov by Prisma Cloud 3.2.111","Checkov by Prisma Cloud 3.2.112","Checkov by Prisma Cloud 3.2.113","Checkov by Prisma Cloud 3.2.114","Checkov by Prisma Cloud 3.2.115","Checkov by Prisma Cloud 3.2.116","Checkov by Prisma Cloud 3.2.117","Checkov by Prisma Cloud 3.2.118","Checkov by Prisma Cloud 3.2.119","Checkov by Prisma Cloud 3.2.120","Checkov by Prisma Cloud 3.2.121","Checkov by Prisma Cloud 3.2.122","Checkov by Prisma Cloud 3.2.123","Checkov by Prisma Cloud 3.2.124","Checkov by Prisma Cloud 3.2.125","Checkov by Prisma Cloud 3.2.126","Checkov by Prisma Cloud 3.2.127","Checkov by Prisma Cloud 3.2.128","Checkov by Prisma Cloud 3.2.129","Checkov by Prisma Cloud 3.2.130","Checkov by Prisma Cloud 3.2.131","Checkov by Prisma Cloud 3.2.132","Checkov by Prisma Cloud 3.2.133","Checkov by Prisma Cloud 3.2.134","Checkov by Prisma Cloud 3.2.135","Checkov by Prisma Cloud 3.2.136","Checkov by Prisma Cloud 3.2.137","Checkov by Prisma Cloud 3.2.138","Checkov by Prisma Cloud 3.2.139","Checkov by Prisma Cloud 3.2.140","Checkov by Prisma Cloud 3.2.141","Checkov by Prisma Cloud 3.2.142","Checkov by Prisma Cloud 3.2.143","Checkov by Prisma Cloud 3.2.144","Checkov by Prisma Cloud 3.2.145","Checkov by Prisma Cloud 3.2.146","Checkov by Prisma Cloud 3.2.147","Checkov by Prisma Cloud 3.2.148","Checkov by Prisma Cloud 3.2.149","Checkov by Prisma Cloud 3.2.150","Checkov by Prisma Cloud 3.2.151","Checkov by Prisma Cloud 3.2.152","Checkov by Prisma Cloud 3.2.153","Checkov by Prisma Cloud 3.2.154","Checkov by Prisma Cloud 3.2.155","Checkov by Prisma Cloud 3.2.156","Checkov by Prisma Cloud 3.2.157","Checkov by Prisma Cloud 3.2.158","Checkov by Prisma Cloud 3.2.159","Checkov by Prisma Cloud 3.2.160","Checkov by Prisma Cloud 3.2.161","Checkov by Prisma Cloud 3.2.162","Checkov by Prisma Cloud 3.2.163","Checkov by Prisma Cloud 3.2.164","Checkov by Prisma Cloud 3.2.165","Checkov by Prisma Cloud 3.2.166","Checkov by Prisma Cloud 3.2.167","Checkov by Prisma Cloud 3.2.168","Checkov by Prisma Cloud 3.2.169","Checkov by Prisma Cloud 3.2.170","Checkov by Prisma Cloud 3.2.171","Checkov by Prisma Cloud 3.2.172","Checkov by Prisma Cloud 3.2.173","Checkov by Prisma Cloud 3.2.174","Checkov by Prisma Cloud 3.2.175","Checkov by Prisma Cloud 3.2.176","Checkov by Prisma Cloud 3.2.177","Checkov by Prisma Cloud 3.2.178","Checkov by Prisma Cloud 3.2.179","Checkov by Prisma Cloud 3.2.180","Checkov by Prisma Cloud 3.2.181","Checkov by Prisma Cloud 3.2.182","Checkov by Prisma Cloud 3.2.183","Checkov by Prisma Cloud 3.2.184","Checkov by Prisma Cloud 3.2.185","Checkov by Prisma Cloud 3.2.186","Checkov by Prisma Cloud 3.2.187","Checkov by Prisma Cloud 3.2.188","Checkov by Prisma Cloud 3.2.189","Checkov by Prisma Cloud 3.2.190","Checkov by Prisma Cloud 3.2.191","Checkov by Prisma Cloud 3.2.192","Checkov by Prisma Cloud 3.2.193","Checkov by Prisma Cloud 3.2.194","Checkov by Prisma Cloud 3.2.195","Checkov by Prisma Cloud 3.2.196","Checkov by Prisma Cloud 3.2.197","Checkov by Prisma Cloud 3.2.198","Checkov by Prisma Cloud 3.2.199","Checkov by Prisma Cloud 3.2.200","Checkov by Prisma Cloud 3.2.201","Checkov by Prisma Cloud 3.2.202","Checkov by Prisma Cloud 3.2.203","Checkov by Prisma Cloud 3.2.204","Checkov by Prisma Cloud 3.2.205","Checkov by Prisma Cloud 3.2.206","Checkov by Prisma Cloud 3.2.207","Checkov by Prisma Cloud 3.2.208","Checkov by Prisma Cloud 3.2.209","Checkov by Prisma Cloud 3.2.210","Checkov by Prisma Cloud 3.2.211","Checkov by Prisma Cloud 3.2.212","Checkov by Prisma Cloud 3.2.213","Checkov by Prisma Cloud 3.2.214","Checkov by Prisma Cloud 3.2.215","Checkov by Prisma Cloud 3.2.216","Checkov by Prisma Cloud 3.2.217","Checkov by Prisma Cloud 3.2.218","Checkov by Prisma Cloud 3.2.219","Checkov by Prisma Cloud 3.2.220","Checkov by Prisma Cloud 3.2.221","Checkov by Prisma Cloud 3.2.222","Checkov by Prisma Cloud 3.2.223","Checkov by Prisma Cloud 3.2.224","Checkov by Prisma Cloud 3.2.225","Checkov by Prisma Cloud 3.2.226","Checkov by Prisma Cloud 3.2.227","Checkov by Prisma Cloud 3.2.228","Checkov by Prisma Cloud 3.2.229","Checkov by Prisma Cloud 3.2.230","Checkov by Prisma Cloud 3.2.231","Checkov by Prisma Cloud 3.2.232","Checkov by Prisma Cloud 3.2.233","Checkov by Prisma Cloud 3.2.234","Checkov by Prisma Cloud 3.2.235","Checkov by Prisma Cloud 3.2.236","Checkov by Prisma Cloud 3.2.237","Checkov by Prisma Cloud 3.2.238","Checkov by Prisma Cloud 3.2.239","Checkov by Prisma Cloud 3.2.240","Checkov by Prisma Cloud 3.2.241","Checkov by Prisma Cloud 3.2.242","Checkov by Prisma Cloud 3.2.243","Checkov by Prisma Cloud 3.2.244","Checkov by Prisma Cloud 3.2.245","Checkov by Prisma Cloud 3.2.246","Checkov by Prisma Cloud 3.2.247","Checkov by Prisma Cloud 3.2.248","Checkov by Prisma Cloud 3.2.249","Checkov by Prisma Cloud 3.2.250","Checkov by Prisma Cloud 3.2.251","Checkov by Prisma Cloud 3.2.252","Checkov by Prisma Cloud 3.2.253","Checkov by Prisma Cloud 3.2.254","Checkov by Prisma Cloud 3.2.255","Checkov by Prisma Cloud 3.2.256","Checkov by Prisma Cloud 3.2.257","Checkov by Prisma Cloud 3.2.258","Checkov by Prisma Cloud 3.2.259","Checkov by Prisma Cloud 3.2.260","Checkov by Prisma Cloud 3.2.261","Checkov by Prisma Cloud 3.2.262","Checkov by Prisma Cloud 3.2.263","Checkov by Prisma Cloud 3.2.264","Checkov by Prisma Cloud 3.2.265","Checkov by Prisma Cloud 3.2.266","Checkov by Prisma Cloud 3.2.267","Checkov by Prisma Cloud 3.2.268","Checkov by Prisma Cloud 3.2.269","Checkov by Prisma Cloud 3.2.270","Checkov by Prisma Cloud 3.2.271","Checkov by Prisma Cloud 3.2.272","Checkov by Prisma Cloud 3.2.273","Checkov by Prisma Cloud 3.2.274","Checkov by Prisma Cloud 3.2.275","Checkov by Prisma Cloud 3.2.276","Checkov by Prisma Cloud 3.2.277","Checkov by Prisma Cloud 3.2.278","Checkov by Prisma Cloud 3.2.279","Checkov by Prisma Cloud 3.2.280","Checkov by Prisma Cloud 3.2.281","Checkov by Prisma Cloud 3.2.282","Checkov by Prisma Cloud 3.2.283","Checkov by Prisma Cloud 3.2.284","Checkov by Prisma Cloud 3.2.285","Checkov by Prisma Cloud 3.2.286","Checkov by Prisma Cloud 3.2.287","Checkov by Prisma Cloud 3.2.288","Checkov by Prisma Cloud 3.2.289","Checkov by Prisma Cloud 3.2.290","Checkov by Prisma Cloud 3.2.291","Checkov by Prisma Cloud 3.2.292","Checkov by Prisma Cloud 3.2.293","Checkov by Prisma Cloud 3.2.294","Checkov by Prisma Cloud 3.2.295","Checkov by Prisma Cloud 3.2.296","Checkov by Prisma Cloud 3.2.297","Checkov by Prisma Cloud 3.2.298","Checkov by Prisma Cloud 3.2.299","Checkov by Prisma Cloud 3.2.300","Checkov by Prisma Cloud 3.2.301","Checkov by Prisma Cloud 3.2.302","Checkov by Prisma Cloud 3.2.303","Checkov by Prisma Cloud 3.2.304","Checkov by Prisma Cloud 3.2.305","Checkov by Prisma Cloud 3.2.306","Checkov by Prisma Cloud 3.2.307","Checkov by Prisma Cloud 3.2.308","Checkov by Prisma Cloud 3.2.309","Checkov by Prisma Cloud 3.2.310","Checkov by Prisma Cloud 3.2.311","Checkov by Prisma Cloud 3.2.312","Checkov by Prisma Cloud 3.2.313","Checkov by Prisma Cloud 3.2.314","Checkov by Prisma Cloud 3.2.315","Checkov by Prisma Cloud 3.2.316","Checkov by Prisma Cloud 3.2.317","Checkov by Prisma Cloud 3.2.318","Checkov by Prisma Cloud 3.2.319","Checkov by Prisma Cloud 3.2.320","Checkov by Prisma Cloud 3.2.321","Checkov by Prisma Cloud 3.2.322","Checkov by Prisma Cloud 3.2.323","Checkov by Prisma Cloud 3.2.324","Checkov by Prisma Cloud 3.2.325","Checkov by Prisma Cloud 3.2.326","Checkov by Prisma Cloud 3.2.327","Checkov by Prisma Cloud 3.2.328","Checkov by Prisma Cloud 3.2.329","Checkov by Prisma Cloud 3.2.330","Checkov by Prisma Cloud 3.2.331","Checkov by Prisma Cloud 3.2.332","Checkov by Prisma Cloud 3.2.333","Checkov by Prisma Cloud 3.2.334","Checkov by Prisma Cloud 3.2.335","Checkov by Prisma Cloud 3.2.336","Checkov by Prisma Cloud 3.2.337","Checkov by Prisma Cloud 3.2.338","Checkov by Prisma Cloud 3.2.339","Checkov by Prisma Cloud 3.2.340","Checkov by Prisma Cloud 3.2.341","Checkov by Prisma Cloud 3.2.342","Checkov by Prisma Cloud 3.2.343","Checkov by Prisma Cloud 3.2.344","Checkov by Prisma Cloud 3.2.345","Checkov by Prisma Cloud 3.2.346","Checkov by Prisma Cloud 3.2.347","Checkov by Prisma Cloud 3.2.348","Checkov by Prisma Cloud 3.2.349","Checkov by Prisma Cloud 3.2.350","Checkov by Prisma Cloud 3.2.351","Checkov by Prisma Cloud 3.2.352","Checkov by Prisma Cloud 3.2.353","Checkov by Prisma Cloud 3.2.354","Checkov by Prisma Cloud 3.2.355","Checkov by Prisma Cloud 3.2.356","Checkov by Prisma Cloud 3.2.357","Checkov by Prisma Cloud 3.2.358","Checkov by Prisma Cloud 3.2.359","Checkov by Prisma Cloud 3.2.360","Checkov by Prisma Cloud 3.2.361","Checkov by Prisma Cloud 3.2.362","Checkov by Prisma Cloud 3.2.363","Checkov by Prisma Cloud 3.2.364","Checkov by Prisma Cloud 3.2.365","Checkov by Prisma Cloud 3.2.366","Checkov by Prisma Cloud 3.2.367","Checkov by Prisma Cloud 3.2.368","Checkov by Prisma Cloud 3.2.369","Checkov by Prisma Cloud 3.2.370","Checkov by Prisma Cloud 3.2.371","Checkov by Prisma Cloud 3.2.372","Checkov by Prisma Cloud 3.2.373","Checkov by Prisma Cloud 3.2.374","Checkov by Prisma Cloud 3.2.375","Checkov by Prisma Cloud 3.2.376","Checkov by Prisma Cloud 3.2.377","Checkov by Prisma Cloud 3.2.378","Checkov by Prisma Cloud 3.2.379","Checkov by Prisma Cloud 3.2.380","Checkov by Prisma Cloud 3.2.381","Checkov by Prisma Cloud 3.2.382","Checkov by Prisma Cloud 3.2.383","Checkov by Prisma Cloud 3.2.384","Checkov by Prisma Cloud 3.2.385","Checkov by Prisma Cloud 3.2.386","Checkov by Prisma Cloud 3.2.387","Checkov by Prisma Cloud 3.2.388","Checkov by Prisma Cloud 3.2.389","Checkov by Prisma Cloud 3.2.390","Checkov by Prisma Cloud 3.2.391","Checkov by Prisma Cloud 3.2.392","Checkov by Prisma Cloud 3.2.393","Checkov by Prisma Cloud 3.2.394","Checkov by Prisma Cloud 3.2.395","Checkov by Prisma Cloud 3.2.396","Checkov by Prisma Cloud 3.2.397","Checkov by Prisma Cloud 3.2.398","Checkov by Prisma Cloud 3.2.399","Checkov by Prisma Cloud 3.2.400","Checkov by Prisma Cloud 3.2.401","Checkov by Prisma Cloud 3.2.402","Checkov by Prisma Cloud 3.2.403","Checkov by Prisma Cloud 3.2.404","Checkov by Prisma Cloud 3.2.405","Checkov by Prisma Cloud 3.2.406","Checkov by Prisma Cloud 3.2.407","Checkov by Prisma Cloud 3.2.408","Checkov by Prisma Cloud 3.2.409","Checkov by Prisma Cloud 3.2.410","Checkov by Prisma Cloud 3.2.411","Checkov by Prisma Cloud 3.2.412","Checkov by Prisma Cloud 3.2.413","Checkov by Prisma Cloud 3.2.414","Checkov by Prisma Cloud 3.2.415","Checkov by Prisma Cloud 3.2.416","Checkov by Prisma Cloud 3.2.417","Checkov by Prisma Cloud 3.2.418","Checkov by Prisma Cloud 3.2.419","Checkov by Prisma Cloud 3.2.420","Checkov by Prisma Cloud 3.2.421","Checkov by Prisma Cloud 3.2.422","Checkov by Prisma Cloud 3.2.423","Checkov by Prisma Cloud 3.2.424","Checkov by Prisma Cloud 3.2.425","Checkov by Prisma Cloud 3.2.426","Checkov by Prisma Cloud 3.2.427","Checkov by Prisma Cloud 3.2.428","Checkov by Prisma Cloud 3.2.429","Checkov by Prisma Cloud 3.2.430","Checkov by Prisma Cloud 3.2.431","Checkov by Prisma Cloud 3.2.432","Checkov by Prisma Cloud 3.2.433","Checkov by Prisma Cloud 3.2.434","Checkov by Prisma Cloud 3.2.435","Checkov by Prisma Cloud 3.2.436","Checkov by Prisma Cloud 3.2.437","Checkov by Prisma Cloud 3.2.438","Checkov by Prisma Cloud 3.2.439","Checkov by Prisma Cloud 3.2.440","Checkov by Prisma Cloud 3.2.441","Checkov by Prisma Cloud 3.2.442","Checkov by Prisma Cloud 3.2.443","Checkov by Prisma Cloud 3.2.444","Checkov by Prisma Cloud 3.2.445","Checkov by Prisma Cloud 3.2.446","Checkov by Prisma Cloud 3.2.447","Checkov by Prisma Cloud 3.2.448","Checkov by Prisma Cloud 3.2.449","Checkov by Prisma Cloud 3.2.450","Checkov by Prisma Cloud 3.2.451","Checkov by Prisma Cloud 3.2.452","Checkov by Prisma Cloud 3.2.453","Checkov by Prisma Cloud 3.2.454","Checkov by Prisma Cloud 3.2.455","Checkov by Prisma Cloud 3.2.456","Checkov by Prisma Cloud 3.2.457","Checkov by Prisma Cloud 3.2.458","Checkov by Prisma Cloud 3.2.459","Checkov by Prisma Cloud 3.2.460","Checkov by Prisma Cloud 3.2.461","Checkov by Prisma Cloud 3.2.462","Checkov by Prisma Cloud 3.2.463","Checkov by Prisma Cloud 3.2.464","Checkov by Prisma Cloud 3.2.465","Checkov by Prisma Cloud 3.2.466","Checkov by Prisma Cloud 3.2.467","Checkov by Prisma Cloud 3.2.468","Checkov by Prisma Cloud 3.2.469","Checkov by Prisma Cloud 3.2.470","Checkov by Prisma Cloud 3.2.471","Checkov by Prisma Cloud 3.2.472","Checkov by Prisma Cloud 3.2.473","Checkov by Prisma Cloud 3.2.474","Checkov by Prisma Cloud 3.2.475","Checkov by Prisma Cloud 3.2.476","Checkov by Prisma Cloud 3.2.477","Checkov by Prisma Cloud 3.2.478","Checkov by Prisma Cloud 3.2.479","Checkov by Prisma Cloud 3.2.480","Checkov by Prisma Cloud 3.2.481","Checkov by Prisma Cloud 3.2.482","Checkov by Prisma Cloud 3.2.483","Checkov by Prisma Cloud 3.2.484","Checkov by Prisma Cloud 3.2.485","Checkov by Prisma Cloud 3.2.486","Checkov by Prisma Cloud 3.2.487","Checkov by Prisma Cloud 3.2.488","Checkov by Prisma Cloud 3.2.489","Checkov by Prisma Cloud 3.2.490","Checkov by Prisma Cloud 3.2.491","Checkov by Prisma Cloud 3.2.492","Checkov by Prisma Cloud 3.2.493","Checkov by Prisma Cloud 3.2.494","Checkov by Prisma Cloud 3.2.495","Checkov by Prisma Cloud 3.2.496","Checkov by Prisma Cloud 3.2.497","Checkov by Prisma Cloud 3.2.498","Checkov by Prisma Cloud 3.2.499","Checkov by Prisma Cloud 3.2.500","Checkov by Prisma Cloud 3.2.501","Checkov by Prisma Cloud 3.2.502","Checkov by Prisma Cloud 3.2.503","Checkov by Prisma Cloud 3.2.504","Checkov by Prisma Cloud 3.2.505","Checkov by Prisma Cloud 3.2.506","Checkov by Prisma Cloud 3.2.507","Checkov by Prisma Cloud 3.2.508","Checkov by Prisma Cloud 3.2.509","Checkov by Prisma Cloud 3.2.510","Checkov by Prisma Cloud 3.2.511","Checkov by Prisma Cloud 3.2.512","Checkov by Prisma Cloud 3.2.513","Checkov by Prisma Cloud 3.2.514","Checkov by Prisma Cloud 3.2.515","Checkov by Prisma Cloud 3.2.516","Checkov by Prisma Cloud 3.2.517","Checkov by Prisma Cloud 3.2.518","Checkov by Prisma Cloud 3.2.519","Checkov by Prisma Cloud 3.2.520","Checkov by Prisma Cloud 3.2.521","Checkov by Prisma Cloud 3.2.522","Checkov by Prisma Cloud 3.2.523","Checkov by Prisma Cloud 3.2.524","Checkov by Prisma Cloud 3.2.525","Checkov by Prisma Cloud 3.2.526","Checkov by Prisma Cloud 3.2.527","Checkov by Prisma Cloud 3.2.528","Checkov by Prisma Cloud 3.2.529","Checkov by Prisma Cloud 3.2.530","Checkov by Prisma Cloud 3.2.531"],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}}},"cveMetadata":{"assignerOrgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","assignerShortName":"palo_alto","cveId":"CVE-2026-0303","datePublished":"2026-09-10T06:03:50.513Z","dateReserved":"2025-11-03T20:45:01.388Z","dateUpdated":"2026-09-10T06:03:50.513Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-10 07:17:02","lastModifiedDate":"2026-09-10 07:17:02","problem_types":["CWE-829","CWE-829 CWE-829 Inclusion of Functionality from Untrusted Control Sphere"],"metrics":{"cvssMetricV40":[{"source":"psirt@paloaltonetworks.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","baseScore":2.4,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"NONE","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"303","Ordinal":"1","Title":"Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configur","CVE":"CVE-2026-0303","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"303","Ordinal":"1","NoteData":"A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.","Type":"Description","Title":"Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configur"}]}}}