Refine your search
9 vulnerabilities found for Checkov by Prisma Cloud by Palo Alto Networks
CERTFR-2026-AVI-1326
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Palo Alto Networks indique que la vulnérabilité CVE-2026-0322 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Un correctif est en attente de publication pour PAN-OS versions 11.2.6.
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.10-x antérieures à 11.2.10-h15 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.13-x antérieures à 11.1.13-h15 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 10.2.13-x antérieures à 10.2.13-h26 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.0.x antérieures à 6.0.15 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.6-x antérieures à 11.1.6-h39 | ||
| Palo Alto Networks | Prisma Access | Prisma Access versions antérieures à 11.2.0 sans les derniers correctifs de sécurité | ||
| Palo Alto Networks | Prisma Access | Prisma Access versions antérieures à 10.2.0 sans les derniers correctifs de sécurité | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.4-x antérieures à 11.2.4-h22 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.1.7-x antérieures à 12.1.7-h8 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.10-x antérieures à 11.1.10-h41 | ||
| Palo Alto Networks | Checkov by Prisma Cloud | Checkov by Prisma Cloud versions 3.3.x antérieures à 3.3.25 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 10.2.10-x antérieures à 10.2.10-h41 | ||
| Palo Alto Networks | Cortex XSOAR | Cortex XSOAR OS Query versions antérieures à 1.0.17 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 10.2.18-x antérieures à 10.2.18-h12 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions antérieures à 12.2.4 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.13-x antérieures à 11.2.13-h3 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 10.2.16-x antérieures à 10.2.16-h11 | ||
| Palo Alto Networks | Cortex XSIAM | Cortex XSIAM OS Query versions antérieures à 1.0.17 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.7-x antérieures à 11.1.7-h11 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.2.x antérieures à 6.2.8-h15 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.4-x antérieures à 11.1.4-h37 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 10.2.7-x antérieures à 10.2.7-h38 | ||
| Palo Alto Networks | Checkov by Prisma Cloud | Checkov by Prisma Cloud versions 3.2.x antérieures à 3.2.533 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions antérieures à 11.2.16 | ||
| Palo Alto Networks | Prisma Access Browser | Prisma Browser versions antérieures à 152.8.5.83 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.1.4-x antérieures à 12.1.4-h12 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.16-x antérieures à 11.1.16-h3 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.7-x antérieures à 11.2.7-h21 | ||
| Palo Alto Networks | Prisma Access | Prisma Access versions antérieures à 12.1.0 sans les derniers correctifs de sécurité | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.1.10-x antérieures à 12.1.10-h2 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.3.x antérieures à 6.3.3-h16 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "PAN-OS versions 11.2.10-x ant\u00e9rieures \u00e0 11.2.10-h15",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.13-x ant\u00e9rieures \u00e0 11.1.13-h15",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 10.2.13-x ant\u00e9rieures \u00e0 10.2.13-h26",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.0.x ant\u00e9rieures \u00e0 6.0.15",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.6-x ant\u00e9rieures \u00e0 11.1.6-h39",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access versions ant\u00e9rieures \u00e0 11.2.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access versions ant\u00e9rieures \u00e0 10.2.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.4-x ant\u00e9rieures \u00e0 11.2.4-h22",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.1.7-x ant\u00e9rieures \u00e0 12.1.7-h8",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.10-x ant\u00e9rieures \u00e0 11.1.10-h41",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Checkov by Prisma Cloud versions 3.3.x ant\u00e9rieures \u00e0 3.3.25",
"product": {
"name": "Checkov by Prisma Cloud",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 10.2.10-x ant\u00e9rieures \u00e0 10.2.10-h41",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Cortex XSOAR OS Query versions ant\u00e9rieures \u00e0 1.0.17",
"product": {
"name": "Cortex XSOAR",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 10.2.18-x ant\u00e9rieures \u00e0 10.2.18-h12",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions ant\u00e9rieures \u00e0 12.2.4",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.13-x ant\u00e9rieures \u00e0 11.2.13-h3",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 10.2.16-x ant\u00e9rieures \u00e0 10.2.16-h11",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Cortex XSIAM OS Query versions ant\u00e9rieures \u00e0 1.0.17",
"product": {
"name": "Cortex XSIAM",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.7-x ant\u00e9rieures \u00e0 11.1.7-h11",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.2.x ant\u00e9rieures \u00e0 6.2.8-h15",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.4-x ant\u00e9rieures \u00e0 11.1.4-h37",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 10.2.7-x ant\u00e9rieures \u00e0 10.2.7-h38",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Checkov by Prisma Cloud versions 3.2.x ant\u00e9rieures \u00e0 3.2.533",
"product": {
"name": "Checkov by Prisma Cloud",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions ant\u00e9rieures \u00e0 11.2.16",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Browser versions ant\u00e9rieures \u00e0 152.8.5.83",
"product": {
"name": "Prisma Access Browser",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.1.4-x ant\u00e9rieures \u00e0 12.1.4-h12",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.16-x ant\u00e9rieures \u00e0 11.1.16-h3",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.7-x ant\u00e9rieures \u00e0 11.2.7-h21",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access versions ant\u00e9rieures \u00e0 12.1.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.1.10-x ant\u00e9rieures \u00e0 12.1.10-h2",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h16",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
}
],
"affected_systems_content": "Un correctif est en attente de publication pour PAN-OS versions 11.2.6.",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-87464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87464"
},
{
"name": "CVE-2026-87646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87646"
},
{
"name": "CVE-2026-87445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87445"
},
{
"name": "CVE-2026-87643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87643"
},
{
"name": "CVE-2026-85053",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85053"
},
{
"name": "CVE-2026-87619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87619"
},
{
"name": "CVE-2026-87567",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87567"
},
{
"name": "CVE-2026-95284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95284"
},
{
"name": "CVE-2026-95286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95286"
},
{
"name": "CVE-2026-102299",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102299"
},
{
"name": "CVE-2026-87486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87486"
},
{
"name": "CVE-2026-87541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87541"
},
{
"name": "CVE-2026-87501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87501"
},
{
"name": "CVE-2026-87626",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87626"
},
{
"name": "CVE-2026-87656",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87656"
},
{
"name": "CVE-2026-95289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95289"
},
{
"name": "CVE-2026-102324",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102324"
},
{
"name": "CVE-2026-85047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85047"
},
{
"name": "CVE-2026-95376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95376"
},
{
"name": "CVE-2026-87476",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87476"
},
{
"name": "CVE-2026-95363",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95363"
},
{
"name": "CVE-2026-95338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95338"
},
{
"name": "CVE-2026-87622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87622"
},
{
"name": "CVE-2026-87654",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87654"
},
{
"name": "CVE-2026-87583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87583"
},
{
"name": "CVE-2026-87592",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87592"
},
{
"name": "CVE-2026-0316",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0316"
},
{
"name": "CVE-2026-87442",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87442"
},
{
"name": "CVE-2026-91715",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91715"
},
{
"name": "CVE-2026-87450",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87450"
},
{
"name": "CVE-2026-95382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95382"
},
{
"name": "CVE-2026-87431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87431"
},
{
"name": "CVE-2026-87519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87519"
},
{
"name": "CVE-2026-95334",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95334"
},
{
"name": "CVE-2026-91716",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91716"
},
{
"name": "CVE-2026-87598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87598"
},
{
"name": "CVE-2026-95366",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95366"
},
{
"name": "CVE-2026-87462",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87462"
},
{
"name": "CVE-2026-95293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95293"
},
{
"name": "CVE-2026-91725",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91725"
},
{
"name": "CVE-2026-87657",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87657"
},
{
"name": "CVE-2026-87437",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87437"
},
{
"name": "CVE-2026-87623",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87623"
},
{
"name": "CVE-2026-0313",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0313"
},
{
"name": "CVE-2026-95321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95321"
},
{
"name": "CVE-2026-95332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95332"
},
{
"name": "CVE-2026-87447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87447"
},
{
"name": "CVE-2026-87610",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87610"
},
{
"name": "CVE-2026-87484",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87484"
},
{
"name": "CVE-2026-102326",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102326"
},
{
"name": "CVE-2026-91719",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91719"
},
{
"name": "CVE-2026-102329",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102329"
},
{
"name": "CVE-2026-91709",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91709"
},
{
"name": "CVE-2026-87461",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87461"
},
{
"name": "CVE-2026-87444",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87444"
},
{
"name": "CVE-2026-91735",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91735"
},
{
"name": "CVE-2026-95281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95281"
},
{
"name": "CVE-2026-87585",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87585"
},
{
"name": "CVE-2026-87438",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87438"
},
{
"name": "CVE-2026-87509",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87509"
},
{
"name": "CVE-2026-87498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87498"
},
{
"name": "CVE-2026-102318",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102318"
},
{
"name": "CVE-2026-87653",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87653"
},
{
"name": "CVE-2026-95305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95305"
},
{
"name": "CVE-2026-102319",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102319"
},
{
"name": "CVE-2026-106196",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106196"
},
{
"name": "CVE-2026-95365",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95365"
},
{
"name": "CVE-2026-0311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0311"
},
{
"name": "CVE-2026-87453",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87453"
},
{
"name": "CVE-2026-85043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85043"
},
{
"name": "CVE-2026-87595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87595"
},
{
"name": "CVE-2026-87550",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87550"
},
{
"name": "CVE-2026-87537",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87537"
},
{
"name": "CVE-2026-91722",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91722"
},
{
"name": "CVE-2026-87524",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87524"
},
{
"name": "CVE-2026-95285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95285"
},
{
"name": "CVE-2026-87439",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87439"
},
{
"name": "CVE-2026-87568",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87568"
},
{
"name": "CVE-2026-87607",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87607"
},
{
"name": "CVE-2026-87544",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87544"
},
{
"name": "CVE-2026-85046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85046"
},
{
"name": "CVE-2026-87639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87639"
},
{
"name": "CVE-2026-87650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87650"
},
{
"name": "CVE-2026-87429",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87429"
},
{
"name": "CVE-2026-93381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93381"
},
{
"name": "CVE-2026-91726",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91726"
},
{
"name": "CVE-2026-87635",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87635"
},
{
"name": "CVE-2026-95358",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95358"
},
{
"name": "CVE-2026-87630",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87630"
},
{
"name": "CVE-2026-95279",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95279"
},
{
"name": "CVE-2026-87542",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87542"
},
{
"name": "CVE-2026-95360",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95360"
},
{
"name": "CVE-2026-87517",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87517"
},
{
"name": "CVE-2026-87605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87605"
},
{
"name": "CVE-2026-95324",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95324"
},
{
"name": "CVE-2026-87443",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87443"
},
{
"name": "CVE-2026-102301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102301"
},
{
"name": "CVE-2026-87434",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87434"
},
{
"name": "CVE-2026-87569",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87569"
},
{
"name": "CVE-2026-87492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87492"
},
{
"name": "CVE-2026-95312",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95312"
},
{
"name": "CVE-2026-87454",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87454"
},
{
"name": "CVE-2026-87596",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87596"
},
{
"name": "CVE-2026-87640",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87640"
},
{
"name": "CVE-2026-87532",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87532"
},
{
"name": "CVE-2026-87488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87488"
},
{
"name": "CVE-2026-87483",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87483"
},
{
"name": "CVE-2026-87658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87658"
},
{
"name": "CVE-2026-95280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95280"
},
{
"name": "CVE-2026-95362",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95362"
},
{
"name": "CVE-2026-87573",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87573"
},
{
"name": "CVE-2026-87564",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87564"
},
{
"name": "CVE-2026-95295",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95295"
},
{
"name": "CVE-2026-87499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87499"
},
{
"name": "CVE-2026-95327",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95327"
},
{
"name": "CVE-2026-93387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93387"
},
{
"name": "CVE-2026-95328",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95328"
},
{
"name": "CVE-2026-102325",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102325"
},
{
"name": "CVE-2026-95344",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95344"
},
{
"name": "CVE-2026-102305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102305"
},
{
"name": "CVE-2026-91728",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91728"
},
{
"name": "CVE-2026-87468",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87468"
},
{
"name": "CVE-2026-95364",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95364"
},
{
"name": "CVE-2026-95361",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95361"
},
{
"name": "CVE-2026-102323",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102323"
},
{
"name": "CVE-2026-87606",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87606"
},
{
"name": "CVE-2026-95287",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95287"
},
{
"name": "CVE-2026-95381",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95381"
},
{
"name": "CVE-2026-87652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87652"
},
{
"name": "CVE-2026-87632",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87632"
},
{
"name": "CVE-2026-95359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95359"
},
{
"name": "CVE-2026-85048",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85048"
},
{
"name": "CVE-2026-87511",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87511"
},
{
"name": "CVE-2026-87515",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87515"
},
{
"name": "CVE-2026-87496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87496"
},
{
"name": "CVE-2026-87588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87588"
},
{
"name": "CVE-2026-95336",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95336"
},
{
"name": "CVE-2026-87469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87469"
},
{
"name": "CVE-2026-85044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85044"
},
{
"name": "CVE-2026-95355",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95355"
},
{
"name": "CVE-2026-0322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0322"
},
{
"name": "CVE-2026-87575",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87575"
},
{
"name": "CVE-2026-95346",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95346"
},
{
"name": "CVE-2026-87601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87601"
},
{
"name": "CVE-2026-87566",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87566"
},
{
"name": "CVE-2026-87617",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87617"
},
{
"name": "CVE-2026-91720",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91720"
},
{
"name": "CVE-2026-95375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95375"
},
{
"name": "CVE-2026-87481",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87481"
},
{
"name": "CVE-2026-87480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87480"
},
{
"name": "CVE-2026-85049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85049"
},
{
"name": "CVE-2026-102310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102310"
},
{
"name": "CVE-2026-87553",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87553"
},
{
"name": "CVE-2026-87641",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87641"
},
{
"name": "CVE-2026-87514",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87514"
},
{
"name": "CVE-2026-87594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87594"
},
{
"name": "CVE-2026-91708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91708"
},
{
"name": "CVE-2026-87576",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87576"
},
{
"name": "CVE-2026-95373",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95373"
},
{
"name": "CVE-2026-87631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87631"
},
{
"name": "CVE-2026-87614",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87614"
},
{
"name": "CVE-2026-87649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87649"
},
{
"name": "CVE-2026-87455",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87455"
},
{
"name": "CVE-2026-95374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95374"
},
{
"name": "CVE-2026-87535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87535"
},
{
"name": "CVE-2026-95370",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95370"
},
{
"name": "CVE-2026-87436",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87436"
},
{
"name": "CVE-2026-95369",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95369"
},
{
"name": "CVE-2026-87621",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87621"
},
{
"name": "CVE-2026-95322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95322"
},
{
"name": "CVE-2026-87516",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87516"
},
{
"name": "CVE-2026-87551",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87551"
},
{
"name": "CVE-2026-95342",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95342"
},
{
"name": "CVE-2026-93379",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93379"
},
{
"name": "CVE-2026-95292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95292"
},
{
"name": "CVE-2026-102317",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102317"
},
{
"name": "CVE-2026-95330",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95330"
},
{
"name": "CVE-2026-87525",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87525"
},
{
"name": "CVE-2026-93376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93376"
},
{
"name": "CVE-2026-87608",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87608"
},
{
"name": "CVE-2026-95331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95331"
},
{
"name": "CVE-2026-95317",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95317"
},
{
"name": "CVE-2026-87491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87491"
},
{
"name": "CVE-2026-102314",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102314"
},
{
"name": "CVE-2026-93384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93384"
},
{
"name": "CVE-2026-95333",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95333"
},
{
"name": "CVE-2026-87531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87531"
},
{
"name": "CVE-2026-87513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87513"
},
{
"name": "CVE-2026-87547",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87547"
},
{
"name": "CVE-2026-87558",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87558"
},
{
"name": "CVE-2026-87495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87495"
},
{
"name": "CVE-2026-102312",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102312"
},
{
"name": "CVE-2026-87505",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87505"
},
{
"name": "CVE-2026-87482",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87482"
},
{
"name": "CVE-2026-95380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95380"
},
{
"name": "CVE-2026-91721",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91721"
},
{
"name": "CVE-2026-106414",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106414"
},
{
"name": "CVE-2026-87440",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87440"
},
{
"name": "CVE-2026-95372",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95372"
},
{
"name": "CVE-2026-0317",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0317"
},
{
"name": "CVE-2026-87529",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87529"
},
{
"name": "CVE-2026-106401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106401"
},
{
"name": "CVE-2026-102313",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102313"
},
{
"name": "CVE-2026-87593",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87593"
},
{
"name": "CVE-2026-87609",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87609"
},
{
"name": "CVE-2026-93380",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93380"
},
{
"name": "CVE-2026-87590",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87590"
},
{
"name": "CVE-2026-91710",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91710"
},
{
"name": "CVE-2026-91747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91747"
},
{
"name": "CVE-2026-87615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87615"
},
{
"name": "CVE-2026-87536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87536"
},
{
"name": "CVE-2026-87459",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87459"
},
{
"name": "CVE-2026-95304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95304"
},
{
"name": "CVE-2026-87561",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87561"
},
{
"name": "CVE-2026-95275",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95275"
},
{
"name": "CVE-2026-91748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91748"
},
{
"name": "CVE-2026-87638",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87638"
},
{
"name": "CVE-2026-95306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95306"
},
{
"name": "CVE-2026-87451",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87451"
},
{
"name": "CVE-2026-87543",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87543"
},
{
"name": "CVE-2026-95326",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95326"
},
{
"name": "CVE-2026-102331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102331"
},
{
"name": "CVE-2026-102328",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102328"
},
{
"name": "CVE-2026-91743",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91743"
},
{
"name": "CVE-2026-87527",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87527"
},
{
"name": "CVE-2026-85052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85052"
},
{
"name": "CVE-2026-87637",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87637"
},
{
"name": "CVE-2026-91749",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91749"
},
{
"name": "CVE-2026-91717",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91717"
},
{
"name": "CVE-2026-87540",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87540"
},
{
"name": "CVE-2026-93375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93375"
},
{
"name": "CVE-2026-106426",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106426"
},
{
"name": "CVE-2026-87627",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87627"
},
{
"name": "CVE-2026-91727",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91727"
},
{
"name": "CVE-2026-87589",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87589"
},
{
"name": "CVE-2026-87557",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87557"
},
{
"name": "CVE-2026-87539",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87539"
},
{
"name": "CVE-2026-102315",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102315"
},
{
"name": "CVE-2026-93373",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93373"
},
{
"name": "CVE-2026-93377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93377"
},
{
"name": "CVE-2026-87581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87581"
},
{
"name": "CVE-2026-95274",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95274"
},
{
"name": "CVE-2026-91729",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91729"
},
{
"name": "CVE-2026-87457",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87457"
},
{
"name": "CVE-2026-87651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87651"
},
{
"name": "CVE-2026-0312",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0312"
},
{
"name": "CVE-2026-95329",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95329"
},
{
"name": "CVE-2026-95335",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95335"
},
{
"name": "CVE-2026-87433",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87433"
},
{
"name": "CVE-2026-87642",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87642"
},
{
"name": "CVE-2026-85045",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85045"
},
{
"name": "CVE-2026-95323",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95323"
},
{
"name": "CVE-2026-87449",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87449"
},
{
"name": "CVE-2026-102327",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102327"
},
{
"name": "CVE-2026-87586",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87586"
},
{
"name": "CVE-2026-87616",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87616"
},
{
"name": "CVE-2026-95308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95308"
},
{
"name": "CVE-2026-95313",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95313"
},
{
"name": "CVE-2026-87528",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87528"
},
{
"name": "CVE-2026-91712",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91712"
},
{
"name": "CVE-2026-102321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102321"
},
{
"name": "CVE-2026-91746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91746"
},
{
"name": "CVE-2026-87556",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87556"
},
{
"name": "CVE-2026-87522",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87522"
},
{
"name": "CVE-2026-87494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87494"
},
{
"name": "CVE-2026-95385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95385"
},
{
"name": "CVE-2026-87448",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87448"
},
{
"name": "CVE-2026-87477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87477"
},
{
"name": "CVE-2026-91734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91734"
},
{
"name": "CVE-2026-95310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95310"
},
{
"name": "CVE-2026-87478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87478"
},
{
"name": "CVE-2026-87636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87636"
},
{
"name": "CVE-2026-87430",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87430"
},
{
"name": "CVE-2026-87435",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87435"
},
{
"name": "CVE-2026-87602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87602"
},
{
"name": "CVE-2026-91713",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91713"
},
{
"name": "CVE-2026-95296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95296"
},
{
"name": "CVE-2026-87452",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87452"
},
{
"name": "CVE-2026-87648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87648"
},
{
"name": "CVE-2026-87600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87600"
},
{
"name": "CVE-2026-87572",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87572"
},
{
"name": "CVE-2026-106404",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106404"
},
{
"name": "CVE-2026-95350",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95350"
},
{
"name": "CVE-2026-87463",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87463"
},
{
"name": "CVE-2026-87507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87507"
},
{
"name": "CVE-2026-91714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91714"
},
{
"name": "CVE-2026-102306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102306"
},
{
"name": "CVE-2026-102302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102302"
},
{
"name": "CVE-2026-95303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95303"
},
{
"name": "CVE-2026-87574",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87574"
},
{
"name": "CVE-2026-87458",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87458"
},
{
"name": "CVE-2026-102300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102300"
},
{
"name": "CVE-2026-91733",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91733"
},
{
"name": "CVE-2026-85042",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85042"
},
{
"name": "CVE-2026-91732",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91732"
},
{
"name": "CVE-2026-95319",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95319"
},
{
"name": "CVE-2026-95339",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95339"
},
{
"name": "CVE-2026-95367",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95367"
},
{
"name": "CVE-2026-95301",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95301"
},
{
"name": "CVE-2026-87493",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87493"
},
{
"name": "CVE-2026-87470",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87470"
},
{
"name": "CVE-2026-102308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102308"
},
{
"name": "CVE-2026-95316",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95316"
},
{
"name": "CVE-2026-87570",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87570"
},
{
"name": "CVE-2026-95320",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95320"
},
{
"name": "CVE-2026-87578",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87578"
},
{
"name": "CVE-2026-93385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93385"
},
{
"name": "CVE-2026-91730",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91730"
},
{
"name": "CVE-2026-87645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87645"
},
{
"name": "CVE-2026-87580",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87580"
},
{
"name": "CVE-2026-87604",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87604"
},
{
"name": "CVE-2026-95325",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95325"
},
{
"name": "CVE-2026-93374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93374"
},
{
"name": "CVE-2026-95302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95302"
},
{
"name": "CVE-2026-87473",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87473"
},
{
"name": "CVE-2026-95318",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95318"
},
{
"name": "CVE-2026-87487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87487"
},
{
"name": "CVE-2026-87647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87647"
},
{
"name": "CVE-2026-95343",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95343"
},
{
"name": "CVE-2026-95351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95351"
},
{
"name": "CVE-2026-87446",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87446"
},
{
"name": "CVE-2026-102307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102307"
},
{
"name": "CVE-2026-0320",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0320"
},
{
"name": "CVE-2026-95368",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95368"
},
{
"name": "CVE-2026-95354",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95354"
},
{
"name": "CVE-2026-87633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87633"
},
{
"name": "CVE-2026-87512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87512"
},
{
"name": "CVE-2026-95345",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95345"
},
{
"name": "CVE-2026-87587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87587"
},
{
"name": "CVE-2026-87634",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87634"
},
{
"name": "CVE-2026-102303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102303"
},
{
"name": "CVE-2026-87546",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87546"
},
{
"name": "CVE-2026-102304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102304"
},
{
"name": "CVE-2026-0318",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0318"
},
{
"name": "CVE-2026-0314",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0314"
},
{
"name": "CVE-2026-87432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87432"
},
{
"name": "CVE-2026-91718",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91718"
},
{
"name": "CVE-2026-87479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87479"
},
{
"name": "CVE-2026-91745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91745"
},
{
"name": "CVE-2026-87625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87625"
},
{
"name": "CVE-2026-87518",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87518"
},
{
"name": "CVE-2026-87545",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87545"
},
{
"name": "CVE-2026-87465",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87465"
},
{
"name": "CVE-2026-87560",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87560"
},
{
"name": "CVE-2026-91723",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91723"
},
{
"name": "CVE-2026-87563",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87563"
},
{
"name": "CVE-2026-95298",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95298"
},
{
"name": "CVE-2026-91744",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91744"
},
{
"name": "CVE-2026-106393",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106393"
},
{
"name": "CVE-2026-87534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87534"
},
{
"name": "CVE-2026-87508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87508"
},
{
"name": "CVE-2026-95309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95309"
},
{
"name": "CVE-2026-102316",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102316"
},
{
"name": "CVE-2026-91740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91740"
},
{
"name": "CVE-2026-95291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95291"
},
{
"name": "CVE-2026-87613",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87613"
},
{
"name": "CVE-2026-93383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93383"
},
{
"name": "CVE-2026-102311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102311"
},
{
"name": "CVE-2026-87472",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87472"
},
{
"name": "CVE-2026-85051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85051"
},
{
"name": "CVE-2026-87628",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87628"
},
{
"name": "CVE-2026-95384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95384"
},
{
"name": "CVE-2026-91731",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91731"
},
{
"name": "CVE-2026-102309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102309"
},
{
"name": "CVE-2026-95311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95311"
},
{
"name": "CVE-2026-87565",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87565"
},
{
"name": "CVE-2026-87599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87599"
},
{
"name": "CVE-2026-87552",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87552"
},
{
"name": "CVE-2026-0321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0321"
},
{
"name": "CVE-2026-87474",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87474"
},
{
"name": "CVE-2026-95278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95278"
},
{
"name": "CVE-2026-87467",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87467"
},
{
"name": "CVE-2026-87612",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87612"
},
{
"name": "CVE-2026-95290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95290"
},
{
"name": "CVE-2026-87549",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87549"
},
{
"name": "CVE-2026-95300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95300"
},
{
"name": "CVE-2026-87611",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87611"
},
{
"name": "CVE-2026-87603",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87603"
},
{
"name": "CVE-2026-87644",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87644"
},
{
"name": "CVE-2026-95357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95357"
},
{
"name": "CVE-2026-87655",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87655"
},
{
"name": "CVE-2026-95307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95307"
},
{
"name": "CVE-2026-95340",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95340"
},
{
"name": "CVE-2026-91738",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91738"
},
{
"name": "CVE-2026-87530",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87530"
},
{
"name": "CVE-2026-87506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87506"
},
{
"name": "CVE-2026-91739",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91739"
},
{
"name": "CVE-2026-95276",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95276"
},
{
"name": "CVE-2026-87466",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87466"
},
{
"name": "CVE-2026-95283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95283"
},
{
"name": "CVE-2026-87521",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87521"
},
{
"name": "CVE-2026-106244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106244"
},
{
"name": "CVE-2026-102330",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102330"
},
{
"name": "CVE-2026-95315",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95315"
},
{
"name": "CVE-2026-0319",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0319"
},
{
"name": "CVE-2026-87497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87497"
},
{
"name": "CVE-2026-102320",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102320"
},
{
"name": "CVE-2026-87441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87441"
},
{
"name": "CVE-2026-93382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93382"
},
{
"name": "CVE-2026-87471",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87471"
},
{
"name": "CVE-2026-87577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87577"
},
{
"name": "CVE-2026-95294",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95294"
},
{
"name": "CVE-2026-95353",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95353"
},
{
"name": "CVE-2026-91742",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91742"
},
{
"name": "CVE-2026-87597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87597"
},
{
"name": "CVE-2026-87460",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87460"
},
{
"name": "CVE-2026-91724",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91724"
},
{
"name": "CVE-2026-87571",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87571"
},
{
"name": "CVE-2026-87591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87591"
},
{
"name": "CVE-2026-87618",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87618"
},
{
"name": "CVE-2026-95352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95352"
},
{
"name": "CVE-2026-87548",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87548"
},
{
"name": "CVE-2026-87538",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87538"
},
{
"name": "CVE-2026-95297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95297"
},
{
"name": "CVE-2026-93386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93386"
},
{
"name": "CVE-2026-106185",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106185"
},
{
"name": "CVE-2026-106408",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106408"
},
{
"name": "CVE-2026-87555",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87555"
},
{
"name": "CVE-2026-95282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95282"
},
{
"name": "CVE-2026-95337",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95337"
},
{
"name": "CVE-2026-91736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91736"
},
{
"name": "CVE-2026-87620",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87620"
},
{
"name": "CVE-2026-87520",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87520"
},
{
"name": "CVE-2026-87490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87490"
},
{
"name": "CVE-2026-87475",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87475"
},
{
"name": "CVE-2026-87559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87559"
},
{
"name": "CVE-2026-87500",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87500"
},
{
"name": "CVE-2026-95347",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95347"
},
{
"name": "CVE-2026-87504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87504"
},
{
"name": "CVE-2026-95314",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95314"
},
{
"name": "CVE-2026-95277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95277"
},
{
"name": "CVE-2026-95288",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95288"
},
{
"name": "CVE-2026-87582",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87582"
},
{
"name": "CVE-2026-87523",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87523"
},
{
"name": "CVE-2026-87624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87624"
},
{
"name": "CVE-2026-95341",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95341"
},
{
"name": "CVE-2026-93378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93378"
},
{
"name": "CVE-2026-91737",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91737"
},
{
"name": "CVE-2026-87579",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87579"
},
{
"name": "CVE-2026-91711",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91711"
},
{
"name": "CVE-2026-85050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85050"
},
{
"name": "CVE-2026-87502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87502"
},
{
"name": "CVE-2026-95349",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95349"
},
{
"name": "CVE-2026-87489",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87489"
},
{
"name": "CVE-2026-91741",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91741"
},
{
"name": "CVE-2026-95356",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95356"
},
{
"name": "CVE-2026-95299",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95299"
},
{
"name": "CVE-2026-87526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87526"
},
{
"name": "CVE-2026-87510",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87510"
},
{
"name": "CVE-2026-87533",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87533"
},
{
"name": "CVE-2026-87584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87584"
},
{
"name": "CVE-2026-93372",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93372"
},
{
"name": "CVE-2026-87562",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87562"
},
{
"name": "CVE-2026-87503",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87503"
},
{
"name": "CVE-2026-0315",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0315"
},
{
"name": "CVE-2026-87629",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87629"
},
{
"name": "CVE-2026-95348",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95348"
},
{
"name": "CVE-2026-95371",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95371"
},
{
"name": "CVE-2026-87485",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87485"
},
{
"name": "CVE-2026-87554",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87554"
},
{
"name": "CVE-2026-87456",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87456"
}
],
"initial_release_date": "2026-10-15T00:00:00",
"last_revision_date": "2026-10-15T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1326",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nPalo Alto Networks indique que la vuln\u00e9rabilit\u00e9 CVE-2026-0322 est activement exploit\u00e9e.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
"vendor_advisories": [
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0319",
"url": "https://security.paloaltonetworks.com/CVE-2026-0319"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0314",
"url": "https://security.paloaltonetworks.com/CVE-2026-0314"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0317",
"url": "https://security.paloaltonetworks.com/CVE-2026-0317"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0313",
"url": "https://security.paloaltonetworks.com/CVE-2026-0313"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0318",
"url": "https://security.paloaltonetworks.com/CVE-2026-0318"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0321",
"url": "https://security.paloaltonetworks.com/CVE-2026-0321"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0316",
"url": "https://security.paloaltonetworks.com/CVE-2026-0316"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0320",
"url": "https://security.paloaltonetworks.com/CVE-2026-0320"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0013",
"url": "https://security.paloaltonetworks.com/PAN-SA-2026-0013"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0312",
"url": "https://security.paloaltonetworks.com/CVE-2026-0312"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0315",
"url": "https://security.paloaltonetworks.com/CVE-2026-0315"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0322",
"url": "https://security.paloaltonetworks.com/CVE-2026-0322"
},
{
"published_at": "2026-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0311",
"url": "https://security.paloaltonetworks.com/CVE-2026-0311"
}
]
}
CERTFR-2026-AVI-1156
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une injection de code indirecte à distance (XSS).
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.3 antérieures à 6.3.3-h15 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.1.x antérieures à 12.1.10 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App toutes versions pour Android | ||
| Palo Alto Networks | Prisma Access | Prisma Access versions antérieures à 11.2.0 sans les derniers correctifs de sécurité | ||
| Palo Alto Networks | Prisma Access | Prisma Access versions antérieures à 10.2.0 sans les derniers correctifs de sécurité | ||
| Palo Alto Networks | Checkov by Prisma Cloud | Checkov by Prisma Cloud versions 3.2.x antérieures à 3.2.532 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.4-hx antérieures à 11.1.4-h36 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.2.x antérieures à 12.2.3 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions antérieures à 10.2.7-h37 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.0 antérieures à 6.0.15 | ||
| Palo Alto Networks | Cloud NGFW | Cloud NGFW toutes versions | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.13-hx antérieures à 11.2.13-h2 | ||
| Palo Alto Networks | Cortex XDR Broker | Cortex XDR Broker versions antérieures à 32.0.52 | ||
| Palo Alto Networks | Prisma Access | Prisma Access Agent versions antérieures à 26.2 pour Windows | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App toutes versions pour ChromeOS | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.4-hx antérieures à 11.2.4-h21 | ||
| Palo Alto Networks | Prisma Access | Prisma Access Agent versions antérieures à 26.3 pour Linux | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.2 antérieures à 6.2.8-h14 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App toutes versions pour iOS | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.16-hx antérieures à 11.1.16-h2 | ||
| Palo Alto Networks | Prisma Access | Prisma Browser versions antérieures à 151.26.5.170 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.1.4-hx antérieures à 12.1.4-h10 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "GlobalProtect App versions 6.3 ant\u00e9rieures \u00e0 6.3.3-h15",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.1.x ant\u00e9rieures \u00e0 12.1.10",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App toutes versions pour Android",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access versions ant\u00e9rieures \u00e0 11.2.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access versions ant\u00e9rieures \u00e0 10.2.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Checkov by Prisma Cloud versions 3.2.x ant\u00e9rieures \u00e0 3.2.532",
"product": {
"name": "Checkov by Prisma Cloud",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.4-hx ant\u00e9rieures \u00e0 11.1.4-h36",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.2.x ant\u00e9rieures \u00e0 12.2.3",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions ant\u00e9rieures \u00e0 10.2.7-h37",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.0 ant\u00e9rieures \u00e0 6.0.15",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Cloud NGFW toutes versions",
"product": {
"name": "Cloud NGFW",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.13-hx ant\u00e9rieures \u00e0 11.2.13-h2",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Cortex XDR Broker versions ant\u00e9rieures \u00e0 32.0.52",
"product": {
"name": "Cortex XDR Broker",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access Agent versions ant\u00e9rieures \u00e0 26.2 pour Windows",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App toutes versions pour ChromeOS",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.4-hx ant\u00e9rieures \u00e0 11.2.4-h21",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access Agent versions ant\u00e9rieures \u00e0 26.3 pour Linux",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.2 ant\u00e9rieures \u00e0 6.2.8-h14",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App toutes versions pour iOS",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.16-hx ant\u00e9rieures \u00e0 11.1.16-h2",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Browser versions ant\u00e9rieures \u00e0 151.26.5.170",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.1.4-hx ant\u00e9rieures \u00e0 12.1.4-h10",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-84357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84357"
},
{
"name": "CVE-2026-76046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76046"
},
{
"name": "CVE-2026-0305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0305"
},
{
"name": "CVE-2026-0308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0308"
},
{
"name": "CVE-2026-0303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0303"
},
{
"name": "CVE-2026-79016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79016"
},
{
"name": "CVE-2026-84348",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84348"
},
{
"name": "CVE-2026-76020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76020"
},
{
"name": "CVE-2026-0307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0307"
},
{
"name": "CVE-2026-84351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84351"
},
{
"name": "CVE-2026-0304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0304"
},
{
"name": "CVE-2026-79286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79286"
},
{
"name": "CVE-2026-76038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76038"
},
{
"name": "CVE-2026-79282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79282"
},
{
"name": "CVE-2026-79290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79290"
},
{
"name": "CVE-2026-0309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0309"
},
{
"name": "CVE-2026-84358",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84358"
},
{
"name": "CVE-2026-0302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0302"
},
{
"name": "CVE-2026-79195",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79195"
},
{
"name": "CVE-2026-76022",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76022"
},
{
"name": "CVE-2026-79118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79118"
},
{
"name": "CVE-2026-79293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79293"
},
{
"name": "CVE-2026-79032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79032"
},
{
"name": "CVE-2026-76047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76047"
},
{
"name": "CVE-2026-0310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0310"
},
{
"name": "CVE-2026-84350",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84350"
},
{
"name": "CVE-2026-84359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84359"
},
{
"name": "CVE-2026-0306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0306"
}
],
"initial_release_date": "2026-09-10T00:00:00",
"last_revision_date": "2026-09-10T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1156",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une injection de code indirecte \u00e0 distance (XSS).",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
"vendor_advisories": [
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0302"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0308",
"url": "https://security.paloaltonetworks.com/CVE-2026-0308"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0012",
"url": "https://security.paloaltonetworks.com/PAN-SA-2026-0012"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0304"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0305"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0303",
"url": "https://security.paloaltonetworks.com/CVE-2026-0303"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0307"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0310",
"url": "https://security.paloaltonetworks.com/CVE-2026-0310"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0306"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0309",
"url": "https://security.paloaltonetworks.com/CVE-2026-0309"
}
]
}
CERTFR-2025-AVI-0695
Vulnerability from certfr_avis
De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Palo Alto Networks | Prisma Access Browser | Prisma Access Browser versions antérieures à 138.53.6.158 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions antérieures à 6.2.8-h3 (6.2.8-c263) pour Windows | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions antérieures à 6.3.3 pour Linux | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.x antérieures à 11.2.8 sur PA-7500 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.3.x antérieures à 6.3.3-h2 (6.3.3-c676) pour Windows | ||
| Palo Alto Networks | Checkov by Prisma Cloud | Checkov by Prisma Cloud versions 3.2.x antérieures à 3.2.449 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.x antérieures à 11.1.10 sur PA-7500 | ||
| Palo Alto Networks | Cortex XDR Broker | Cortex XDR Broker VM versions 28.0.x antérieures à 28.0.52 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Prisma Access Browser versions ant\u00e9rieures \u00e0 138.53.6.158",
"product": {
"name": "Prisma Access Browser",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.2.8-h3 (6.2.8-c263) pour Windows",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.3.3 pour Linux",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.x ant\u00e9rieures \u00e0 11.2.8 sur PA-7500",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h2 (6.3.3-c676) pour Windows",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Checkov by Prisma Cloud versions 3.2.x ant\u00e9rieures \u00e0 3.2.449",
"product": {
"name": "Checkov by Prisma Cloud",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.x ant\u00e9rieures \u00e0 11.1.10 sur PA-7500",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Cortex XDR Broker VM versions 28.0.x ant\u00e9rieures \u00e0 28.0.52",
"product": {
"name": "Cortex XDR Broker",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-2182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2182"
},
{
"name": "CVE-2025-2183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2183"
},
{
"name": "CVE-2025-7656",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7656"
},
{
"name": "CVE-2025-7657",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7657"
},
{
"name": "CVE-2024-5921",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5921"
},
{
"name": "CVE-2025-2184",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2184"
},
{
"name": "CVE-2025-8292",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8292"
},
{
"name": "CVE-2025-6558",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6558"
},
{
"name": "CVE-2025-8010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8010"
},
{
"name": "CVE-2025-2181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2181"
},
{
"name": "CVE-2025-8011",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8011"
},
{
"name": "CVE-2025-2180",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2180"
}
],
"initial_release_date": "2025-08-14T00:00:00",
"last_revision_date": "2025-08-14T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0695",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
"vendor_advisories": [
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2183",
"url": "https://security.paloaltonetworks.com/CVE-2025-2183"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2180",
"url": "https://security.paloaltonetworks.com/CVE-2025-2180"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2181",
"url": "https://security.paloaltonetworks.com/CVE-2025-2181"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2184",
"url": "https://security.paloaltonetworks.com/CVE-2025-2184"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2182",
"url": "https://security.paloaltonetworks.com/CVE-2025-2182"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2025-0014",
"url": "https://security.paloaltonetworks.com/PAN-SA-2025-0014"
}
]
}
CVE-2026-0311 (GCVE-0-2026-0311)
Vulnerability from cvelistv5
Published
2026-10-14 20:29
Modified
2026-10-15 16:43
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Summary
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Version: 0 < 3.2.533 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0311",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-15T16:19:42.105391Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T16:43:45.351Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.533",
"status": "unaffected"
}
],
"lessThan": "3.2.533",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eNo special configuration is required.\u0026nbsp;\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "No special configuration is required."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.533",
"versionStartIncluding": "3.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Muhammad Ibrahim"
}
],
"datePublic": "2026-10-14T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003e\u003cspan\u003eA server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-664",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-664 Server Side Request Forgery"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 1.1,
"baseSeverity": "LOW",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918 Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-14T20:29:19.297Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"name": "Checkov Security Advisory",
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2026-0311"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCheckov by Prisma Cloud\u003c/td\u003e\u003ctd\u003e\u003cspan\u003e3.2.0 through 3.2.532\u003c/span\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to\u0026nbsp;3.2.533\u0026nbsp;or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud3.2.0 through 3.2.532Upgrade to\u00a03.2.533\u00a0or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-10-14T16:00:00.000Z",
"value": "Initial Publication."
}
],
"title": "Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"x_affectedList": [
"Checkov by Prisma Cloud 3.2.0",
"Checkov by Prisma Cloud 3.2.1",
"Checkov by Prisma Cloud 3.2.2",
"Checkov by Prisma Cloud 3.2.3",
"Checkov by Prisma Cloud 3.2.4",
"Checkov by Prisma Cloud 3.2.5",
"Checkov by Prisma Cloud 3.2.6",
"Checkov by Prisma Cloud 3.2.7",
"Checkov by Prisma Cloud 3.2.8",
"Checkov by Prisma Cloud 3.2.9",
"Checkov by Prisma Cloud 3.2.10",
"Checkov by Prisma Cloud 3.2.11",
"Checkov by Prisma Cloud 3.2.12",
"Checkov by Prisma Cloud 3.2.13",
"Checkov by Prisma Cloud 3.2.14",
"Checkov by Prisma Cloud 3.2.15",
"Checkov by Prisma Cloud 3.2.16",
"Checkov by Prisma Cloud 3.2.17",
"Checkov by Prisma Cloud 3.2.18",
"Checkov by Prisma Cloud 3.2.19",
"Checkov by Prisma Cloud 3.2.20",
"Checkov by Prisma Cloud 3.2.21",
"Checkov by Prisma Cloud 3.2.22",
"Checkov by Prisma Cloud 3.2.23",
"Checkov by Prisma Cloud 3.2.24",
"Checkov by Prisma Cloud 3.2.25",
"Checkov by Prisma Cloud 3.2.26",
"Checkov by Prisma Cloud 3.2.27",
"Checkov by Prisma Cloud 3.2.28",
"Checkov by Prisma Cloud 3.2.29",
"Checkov by Prisma Cloud 3.2.30",
"Checkov by Prisma Cloud 3.2.31",
"Checkov by Prisma Cloud 3.2.32",
"Checkov by Prisma Cloud 3.2.33",
"Checkov by Prisma Cloud 3.2.34",
"Checkov by Prisma Cloud 3.2.35",
"Checkov by Prisma Cloud 3.2.36",
"Checkov by Prisma Cloud 3.2.37",
"Checkov by Prisma Cloud 3.2.38",
"Checkov by Prisma Cloud 3.2.39",
"Checkov by Prisma Cloud 3.2.40",
"Checkov by Prisma Cloud 3.2.41",
"Checkov by Prisma Cloud 3.2.42",
"Checkov by Prisma Cloud 3.2.43",
"Checkov by Prisma Cloud 3.2.44",
"Checkov by Prisma Cloud 3.2.45",
"Checkov by Prisma Cloud 3.2.46",
"Checkov by Prisma Cloud 3.2.47",
"Checkov by Prisma Cloud 3.2.48",
"Checkov by Prisma Cloud 3.2.49",
"Checkov by Prisma Cloud 3.2.50",
"Checkov by Prisma Cloud 3.2.51",
"Checkov by Prisma Cloud 3.2.52",
"Checkov by Prisma Cloud 3.2.53",
"Checkov by Prisma Cloud 3.2.54",
"Checkov by Prisma Cloud 3.2.55",
"Checkov by Prisma Cloud 3.2.56",
"Checkov by Prisma Cloud 3.2.57",
"Checkov by Prisma Cloud 3.2.58",
"Checkov by Prisma Cloud 3.2.59",
"Checkov by Prisma Cloud 3.2.60",
"Checkov by Prisma Cloud 3.2.61",
"Checkov by Prisma Cloud 3.2.62",
"Checkov by Prisma Cloud 3.2.63",
"Checkov by Prisma Cloud 3.2.64",
"Checkov by Prisma Cloud 3.2.65",
"Checkov by Prisma Cloud 3.2.66",
"Checkov by Prisma Cloud 3.2.67",
"Checkov by Prisma Cloud 3.2.68",
"Checkov by Prisma Cloud 3.2.69",
"Checkov by Prisma Cloud 3.2.70",
"Checkov by Prisma Cloud 3.2.71",
"Checkov by Prisma Cloud 3.2.72",
"Checkov by Prisma Cloud 3.2.73",
"Checkov by Prisma Cloud 3.2.74",
"Checkov by Prisma Cloud 3.2.75",
"Checkov by Prisma Cloud 3.2.76",
"Checkov by Prisma Cloud 3.2.77",
"Checkov by Prisma Cloud 3.2.78",
"Checkov by Prisma Cloud 3.2.79",
"Checkov by Prisma Cloud 3.2.80",
"Checkov by Prisma Cloud 3.2.81",
"Checkov by Prisma Cloud 3.2.82",
"Checkov by Prisma Cloud 3.2.83",
"Checkov by Prisma Cloud 3.2.84",
"Checkov by Prisma Cloud 3.2.85",
"Checkov by Prisma Cloud 3.2.86",
"Checkov by Prisma Cloud 3.2.87",
"Checkov by Prisma Cloud 3.2.88",
"Checkov by Prisma Cloud 3.2.89",
"Checkov by Prisma Cloud 3.2.90",
"Checkov by Prisma Cloud 3.2.91",
"Checkov by Prisma Cloud 3.2.92",
"Checkov by Prisma Cloud 3.2.93",
"Checkov by Prisma Cloud 3.2.94",
"Checkov by Prisma Cloud 3.2.95",
"Checkov by Prisma Cloud 3.2.96",
"Checkov by Prisma Cloud 3.2.97",
"Checkov by Prisma Cloud 3.2.98",
"Checkov by Prisma Cloud 3.2.99",
"Checkov by Prisma Cloud 3.2.100",
"Checkov by Prisma Cloud 3.2.101",
"Checkov by Prisma Cloud 3.2.102",
"Checkov by Prisma Cloud 3.2.103",
"Checkov by Prisma Cloud 3.2.104",
"Checkov by Prisma Cloud 3.2.105",
"Checkov by Prisma Cloud 3.2.106",
"Checkov by Prisma Cloud 3.2.107",
"Checkov by Prisma Cloud 3.2.108",
"Checkov by Prisma Cloud 3.2.109",
"Checkov by Prisma Cloud 3.2.110",
"Checkov by Prisma Cloud 3.2.111",
"Checkov by Prisma Cloud 3.2.112",
"Checkov by Prisma Cloud 3.2.113",
"Checkov by Prisma Cloud 3.2.114",
"Checkov by Prisma Cloud 3.2.115",
"Checkov by Prisma Cloud 3.2.116",
"Checkov by Prisma Cloud 3.2.117",
"Checkov by Prisma Cloud 3.2.118",
"Checkov by Prisma Cloud 3.2.119",
"Checkov by Prisma Cloud 3.2.120",
"Checkov by Prisma Cloud 3.2.121",
"Checkov by Prisma Cloud 3.2.122",
"Checkov by Prisma Cloud 3.2.123",
"Checkov by Prisma Cloud 3.2.124",
"Checkov by Prisma Cloud 3.2.125",
"Checkov by Prisma Cloud 3.2.126",
"Checkov by Prisma Cloud 3.2.127",
"Checkov by Prisma Cloud 3.2.128",
"Checkov by Prisma Cloud 3.2.129",
"Checkov by Prisma Cloud 3.2.130",
"Checkov by Prisma Cloud 3.2.131",
"Checkov by Prisma Cloud 3.2.132",
"Checkov by Prisma Cloud 3.2.133",
"Checkov by Prisma Cloud 3.2.134",
"Checkov by Prisma Cloud 3.2.135",
"Checkov by Prisma Cloud 3.2.136",
"Checkov by Prisma Cloud 3.2.137",
"Checkov by Prisma Cloud 3.2.138",
"Checkov by Prisma Cloud 3.2.139",
"Checkov by Prisma Cloud 3.2.140",
"Checkov by Prisma Cloud 3.2.141",
"Checkov by Prisma Cloud 3.2.142",
"Checkov by Prisma Cloud 3.2.143",
"Checkov by Prisma Cloud 3.2.144",
"Checkov by Prisma Cloud 3.2.145",
"Checkov by Prisma Cloud 3.2.146",
"Checkov by Prisma Cloud 3.2.147",
"Checkov by Prisma Cloud 3.2.148",
"Checkov by Prisma Cloud 3.2.149",
"Checkov by Prisma Cloud 3.2.150",
"Checkov by Prisma Cloud 3.2.151",
"Checkov by Prisma Cloud 3.2.152",
"Checkov by Prisma Cloud 3.2.153",
"Checkov by Prisma Cloud 3.2.154",
"Checkov by Prisma Cloud 3.2.155",
"Checkov by Prisma Cloud 3.2.156",
"Checkov by Prisma Cloud 3.2.157",
"Checkov by Prisma Cloud 3.2.158",
"Checkov by Prisma Cloud 3.2.159",
"Checkov by Prisma Cloud 3.2.160",
"Checkov by Prisma Cloud 3.2.161",
"Checkov by Prisma Cloud 3.2.162",
"Checkov by Prisma Cloud 3.2.163",
"Checkov by Prisma Cloud 3.2.164",
"Checkov by Prisma Cloud 3.2.165",
"Checkov by Prisma Cloud 3.2.166",
"Checkov by Prisma Cloud 3.2.167",
"Checkov by Prisma Cloud 3.2.168",
"Checkov by Prisma Cloud 3.2.169",
"Checkov by Prisma Cloud 3.2.170",
"Checkov by Prisma Cloud 3.2.171",
"Checkov by Prisma Cloud 3.2.172",
"Checkov by Prisma Cloud 3.2.173",
"Checkov by Prisma Cloud 3.2.174",
"Checkov by Prisma Cloud 3.2.175",
"Checkov by Prisma Cloud 3.2.176",
"Checkov by Prisma Cloud 3.2.177",
"Checkov by Prisma Cloud 3.2.178",
"Checkov by Prisma Cloud 3.2.179",
"Checkov by Prisma Cloud 3.2.180",
"Checkov by Prisma Cloud 3.2.181",
"Checkov by Prisma Cloud 3.2.182",
"Checkov by Prisma Cloud 3.2.183",
"Checkov by Prisma Cloud 3.2.184",
"Checkov by Prisma Cloud 3.2.185",
"Checkov by Prisma Cloud 3.2.186",
"Checkov by Prisma Cloud 3.2.187",
"Checkov by Prisma Cloud 3.2.188",
"Checkov by Prisma Cloud 3.2.189",
"Checkov by Prisma Cloud 3.2.190",
"Checkov by Prisma Cloud 3.2.191",
"Checkov by Prisma Cloud 3.2.192",
"Checkov by Prisma Cloud 3.2.193",
"Checkov by Prisma Cloud 3.2.194",
"Checkov by Prisma Cloud 3.2.195",
"Checkov by Prisma Cloud 3.2.196",
"Checkov by Prisma Cloud 3.2.197",
"Checkov by Prisma Cloud 3.2.198",
"Checkov by Prisma Cloud 3.2.199",
"Checkov by Prisma Cloud 3.2.200",
"Checkov by Prisma Cloud 3.2.201",
"Checkov by Prisma Cloud 3.2.202",
"Checkov by Prisma Cloud 3.2.203",
"Checkov by Prisma Cloud 3.2.204",
"Checkov by Prisma Cloud 3.2.205",
"Checkov by Prisma Cloud 3.2.206",
"Checkov by Prisma Cloud 3.2.207",
"Checkov by Prisma Cloud 3.2.208",
"Checkov by Prisma Cloud 3.2.209",
"Checkov by Prisma Cloud 3.2.210",
"Checkov by Prisma Cloud 3.2.211",
"Checkov by Prisma Cloud 3.2.212",
"Checkov by Prisma Cloud 3.2.213",
"Checkov by Prisma Cloud 3.2.214",
"Checkov by Prisma Cloud 3.2.215",
"Checkov by Prisma Cloud 3.2.216",
"Checkov by Prisma Cloud 3.2.217",
"Checkov by Prisma Cloud 3.2.218",
"Checkov by Prisma Cloud 3.2.219",
"Checkov by Prisma Cloud 3.2.220",
"Checkov by Prisma Cloud 3.2.221",
"Checkov by Prisma Cloud 3.2.222",
"Checkov by Prisma Cloud 3.2.223",
"Checkov by Prisma Cloud 3.2.224",
"Checkov by Prisma Cloud 3.2.225",
"Checkov by Prisma Cloud 3.2.226",
"Checkov by Prisma Cloud 3.2.227",
"Checkov by Prisma Cloud 3.2.228",
"Checkov by Prisma Cloud 3.2.229",
"Checkov by Prisma Cloud 3.2.230",
"Checkov by Prisma Cloud 3.2.231",
"Checkov by Prisma Cloud 3.2.232",
"Checkov by Prisma Cloud 3.2.233",
"Checkov by Prisma Cloud 3.2.234",
"Checkov by Prisma Cloud 3.2.235",
"Checkov by Prisma Cloud 3.2.236",
"Checkov by Prisma Cloud 3.2.237",
"Checkov by Prisma Cloud 3.2.238",
"Checkov by Prisma Cloud 3.2.239",
"Checkov by Prisma Cloud 3.2.240",
"Checkov by Prisma Cloud 3.2.241",
"Checkov by Prisma Cloud 3.2.242",
"Checkov by Prisma Cloud 3.2.243",
"Checkov by Prisma Cloud 3.2.244",
"Checkov by Prisma Cloud 3.2.245",
"Checkov by Prisma Cloud 3.2.246",
"Checkov by Prisma Cloud 3.2.247",
"Checkov by Prisma Cloud 3.2.248",
"Checkov by Prisma Cloud 3.2.249",
"Checkov by Prisma Cloud 3.2.250",
"Checkov by Prisma Cloud 3.2.251",
"Checkov by Prisma Cloud 3.2.252",
"Checkov by Prisma Cloud 3.2.253",
"Checkov by Prisma Cloud 3.2.254",
"Checkov by Prisma Cloud 3.2.255",
"Checkov by Prisma Cloud 3.2.256",
"Checkov by Prisma Cloud 3.2.257",
"Checkov by Prisma Cloud 3.2.258",
"Checkov by Prisma Cloud 3.2.259",
"Checkov by Prisma Cloud 3.2.260",
"Checkov by Prisma Cloud 3.2.261",
"Checkov by Prisma Cloud 3.2.262",
"Checkov by Prisma Cloud 3.2.263",
"Checkov by Prisma Cloud 3.2.264",
"Checkov by Prisma Cloud 3.2.265",
"Checkov by Prisma Cloud 3.2.266",
"Checkov by Prisma Cloud 3.2.267",
"Checkov by Prisma Cloud 3.2.268",
"Checkov by Prisma Cloud 3.2.269",
"Checkov by Prisma Cloud 3.2.270",
"Checkov by Prisma Cloud 3.2.271",
"Checkov by Prisma Cloud 3.2.272",
"Checkov by Prisma Cloud 3.2.273",
"Checkov by Prisma Cloud 3.2.274",
"Checkov by Prisma Cloud 3.2.275",
"Checkov by Prisma Cloud 3.2.276",
"Checkov by Prisma Cloud 3.2.277",
"Checkov by Prisma Cloud 3.2.278",
"Checkov by Prisma Cloud 3.2.279",
"Checkov by Prisma Cloud 3.2.280",
"Checkov by Prisma Cloud 3.2.281",
"Checkov by Prisma Cloud 3.2.282",
"Checkov by Prisma Cloud 3.2.283",
"Checkov by Prisma Cloud 3.2.284",
"Checkov by Prisma Cloud 3.2.285",
"Checkov by Prisma Cloud 3.2.286",
"Checkov by Prisma Cloud 3.2.287",
"Checkov by Prisma Cloud 3.2.288",
"Checkov by Prisma Cloud 3.2.289",
"Checkov by Prisma Cloud 3.2.290",
"Checkov by Prisma Cloud 3.2.291",
"Checkov by Prisma Cloud 3.2.292",
"Checkov by Prisma Cloud 3.2.293",
"Checkov by Prisma Cloud 3.2.294",
"Checkov by Prisma Cloud 3.2.295",
"Checkov by Prisma Cloud 3.2.296",
"Checkov by Prisma Cloud 3.2.297",
"Checkov by Prisma Cloud 3.2.298",
"Checkov by Prisma Cloud 3.2.299",
"Checkov by Prisma Cloud 3.2.300",
"Checkov by Prisma Cloud 3.2.301",
"Checkov by Prisma Cloud 3.2.302",
"Checkov by Prisma Cloud 3.2.303",
"Checkov by Prisma Cloud 3.2.304",
"Checkov by Prisma Cloud 3.2.305",
"Checkov by Prisma Cloud 3.2.306",
"Checkov by Prisma Cloud 3.2.307",
"Checkov by Prisma Cloud 3.2.308",
"Checkov by Prisma Cloud 3.2.309",
"Checkov by Prisma Cloud 3.2.310",
"Checkov by Prisma Cloud 3.2.311",
"Checkov by Prisma Cloud 3.2.312",
"Checkov by Prisma Cloud 3.2.313",
"Checkov by Prisma Cloud 3.2.314",
"Checkov by Prisma Cloud 3.2.315",
"Checkov by Prisma Cloud 3.2.316",
"Checkov by Prisma Cloud 3.2.317",
"Checkov by Prisma Cloud 3.2.318",
"Checkov by Prisma Cloud 3.2.319",
"Checkov by Prisma Cloud 3.2.320",
"Checkov by Prisma Cloud 3.2.321",
"Checkov by Prisma Cloud 3.2.322",
"Checkov by Prisma Cloud 3.2.323",
"Checkov by Prisma Cloud 3.2.324",
"Checkov by Prisma Cloud 3.2.325",
"Checkov by Prisma Cloud 3.2.326",
"Checkov by Prisma Cloud 3.2.327",
"Checkov by Prisma Cloud 3.2.328",
"Checkov by Prisma Cloud 3.2.329",
"Checkov by Prisma Cloud 3.2.330",
"Checkov by Prisma Cloud 3.2.331",
"Checkov by Prisma Cloud 3.2.332",
"Checkov by Prisma Cloud 3.2.333",
"Checkov by Prisma Cloud 3.2.334",
"Checkov by Prisma Cloud 3.2.335",
"Checkov by Prisma Cloud 3.2.336",
"Checkov by Prisma Cloud 3.2.337",
"Checkov by Prisma Cloud 3.2.338",
"Checkov by Prisma Cloud 3.2.339",
"Checkov by Prisma Cloud 3.2.340",
"Checkov by Prisma Cloud 3.2.341",
"Checkov by Prisma Cloud 3.2.342",
"Checkov by Prisma Cloud 3.2.343",
"Checkov by Prisma Cloud 3.2.344",
"Checkov by Prisma Cloud 3.2.345",
"Checkov by Prisma Cloud 3.2.346",
"Checkov by Prisma Cloud 3.2.347",
"Checkov by Prisma Cloud 3.2.348",
"Checkov by Prisma Cloud 3.2.349",
"Checkov by Prisma Cloud 3.2.350",
"Checkov by Prisma Cloud 3.2.351",
"Checkov by Prisma Cloud 3.2.352",
"Checkov by Prisma Cloud 3.2.353",
"Checkov by Prisma Cloud 3.2.354",
"Checkov by Prisma Cloud 3.2.355",
"Checkov by Prisma Cloud 3.2.356",
"Checkov by Prisma Cloud 3.2.357",
"Checkov by Prisma Cloud 3.2.358",
"Checkov by Prisma Cloud 3.2.359",
"Checkov by Prisma Cloud 3.2.360",
"Checkov by Prisma Cloud 3.2.361",
"Checkov by Prisma Cloud 3.2.362",
"Checkov by Prisma Cloud 3.2.363",
"Checkov by Prisma Cloud 3.2.364",
"Checkov by Prisma Cloud 3.2.365",
"Checkov by Prisma Cloud 3.2.366",
"Checkov by Prisma Cloud 3.2.367",
"Checkov by Prisma Cloud 3.2.368",
"Checkov by Prisma Cloud 3.2.369",
"Checkov by Prisma Cloud 3.2.370",
"Checkov by Prisma Cloud 3.2.371",
"Checkov by Prisma Cloud 3.2.372",
"Checkov by Prisma Cloud 3.2.373",
"Checkov by Prisma Cloud 3.2.374",
"Checkov by Prisma Cloud 3.2.375",
"Checkov by Prisma Cloud 3.2.376",
"Checkov by Prisma Cloud 3.2.377",
"Checkov by Prisma Cloud 3.2.378",
"Checkov by Prisma Cloud 3.2.379",
"Checkov by Prisma Cloud 3.2.380",
"Checkov by Prisma Cloud 3.2.381",
"Checkov by Prisma Cloud 3.2.382",
"Checkov by Prisma Cloud 3.2.383",
"Checkov by Prisma Cloud 3.2.384",
"Checkov by Prisma Cloud 3.2.385",
"Checkov by Prisma Cloud 3.2.386",
"Checkov by Prisma Cloud 3.2.387",
"Checkov by Prisma Cloud 3.2.388",
"Checkov by Prisma Cloud 3.2.389",
"Checkov by Prisma Cloud 3.2.390",
"Checkov by Prisma Cloud 3.2.391",
"Checkov by Prisma Cloud 3.2.392",
"Checkov by Prisma Cloud 3.2.393",
"Checkov by Prisma Cloud 3.2.394",
"Checkov by Prisma Cloud 3.2.395",
"Checkov by Prisma Cloud 3.2.396",
"Checkov by Prisma Cloud 3.2.397",
"Checkov by Prisma Cloud 3.2.398",
"Checkov by Prisma Cloud 3.2.399",
"Checkov by Prisma Cloud 3.2.400",
"Checkov by Prisma Cloud 3.2.401",
"Checkov by Prisma Cloud 3.2.402",
"Checkov by Prisma Cloud 3.2.403",
"Checkov by Prisma Cloud 3.2.404",
"Checkov by Prisma Cloud 3.2.405",
"Checkov by Prisma Cloud 3.2.406",
"Checkov by Prisma Cloud 3.2.407",
"Checkov by Prisma Cloud 3.2.408",
"Checkov by Prisma Cloud 3.2.409",
"Checkov by Prisma Cloud 3.2.410",
"Checkov by Prisma Cloud 3.2.411",
"Checkov by Prisma Cloud 3.2.412",
"Checkov by Prisma Cloud 3.2.413",
"Checkov by Prisma Cloud 3.2.414",
"Checkov by Prisma Cloud 3.2.415",
"Checkov by Prisma Cloud 3.2.416",
"Checkov by Prisma Cloud 3.2.417",
"Checkov by Prisma Cloud 3.2.418",
"Checkov by Prisma Cloud 3.2.419",
"Checkov by Prisma Cloud 3.2.420",
"Checkov by Prisma Cloud 3.2.421",
"Checkov by Prisma Cloud 3.2.422",
"Checkov by Prisma Cloud 3.2.423",
"Checkov by Prisma Cloud 3.2.424",
"Checkov by Prisma Cloud 3.2.425",
"Checkov by Prisma Cloud 3.2.426",
"Checkov by Prisma Cloud 3.2.427",
"Checkov by Prisma Cloud 3.2.428",
"Checkov by Prisma Cloud 3.2.429",
"Checkov by Prisma Cloud 3.2.430",
"Checkov by Prisma Cloud 3.2.431",
"Checkov by Prisma Cloud 3.2.432",
"Checkov by Prisma Cloud 3.2.433",
"Checkov by Prisma Cloud 3.2.434",
"Checkov by Prisma Cloud 3.2.435",
"Checkov by Prisma Cloud 3.2.436",
"Checkov by Prisma Cloud 3.2.437",
"Checkov by Prisma Cloud 3.2.438",
"Checkov by Prisma Cloud 3.2.439",
"Checkov by Prisma Cloud 3.2.440",
"Checkov by Prisma Cloud 3.2.441",
"Checkov by Prisma Cloud 3.2.442",
"Checkov by Prisma Cloud 3.2.443",
"Checkov by Prisma Cloud 3.2.444",
"Checkov by Prisma Cloud 3.2.445",
"Checkov by Prisma Cloud 3.2.446",
"Checkov by Prisma Cloud 3.2.447",
"Checkov by Prisma Cloud 3.2.448",
"Checkov by Prisma Cloud 3.2.449",
"Checkov by Prisma Cloud 3.2.450",
"Checkov by Prisma Cloud 3.2.451",
"Checkov by Prisma Cloud 3.2.452",
"Checkov by Prisma Cloud 3.2.453",
"Checkov by Prisma Cloud 3.2.454",
"Checkov by Prisma Cloud 3.2.455",
"Checkov by Prisma Cloud 3.2.456",
"Checkov by Prisma Cloud 3.2.457",
"Checkov by Prisma Cloud 3.2.458",
"Checkov by Prisma Cloud 3.2.459",
"Checkov by Prisma Cloud 3.2.460",
"Checkov by Prisma Cloud 3.2.461",
"Checkov by Prisma Cloud 3.2.462",
"Checkov by Prisma Cloud 3.2.463",
"Checkov by Prisma Cloud 3.2.464",
"Checkov by Prisma Cloud 3.2.465",
"Checkov by Prisma Cloud 3.2.466",
"Checkov by Prisma Cloud 3.2.467",
"Checkov by Prisma Cloud 3.2.468",
"Checkov by Prisma Cloud 3.2.469",
"Checkov by Prisma Cloud 3.2.470",
"Checkov by Prisma Cloud 3.2.471",
"Checkov by Prisma Cloud 3.2.472",
"Checkov by Prisma Cloud 3.2.473",
"Checkov by Prisma Cloud 3.2.474",
"Checkov by Prisma Cloud 3.2.475",
"Checkov by Prisma Cloud 3.2.476",
"Checkov by Prisma Cloud 3.2.477",
"Checkov by Prisma Cloud 3.2.478",
"Checkov by Prisma Cloud 3.2.479",
"Checkov by Prisma Cloud 3.2.480",
"Checkov by Prisma Cloud 3.2.481",
"Checkov by Prisma Cloud 3.2.482",
"Checkov by Prisma Cloud 3.2.483",
"Checkov by Prisma Cloud 3.2.484",
"Checkov by Prisma Cloud 3.2.485",
"Checkov by Prisma Cloud 3.2.486",
"Checkov by Prisma Cloud 3.2.487",
"Checkov by Prisma Cloud 3.2.488",
"Checkov by Prisma Cloud 3.2.489",
"Checkov by Prisma Cloud 3.2.490",
"Checkov by Prisma Cloud 3.2.491",
"Checkov by Prisma Cloud 3.2.492",
"Checkov by Prisma Cloud 3.2.493",
"Checkov by Prisma Cloud 3.2.494",
"Checkov by Prisma Cloud 3.2.495",
"Checkov by Prisma Cloud 3.2.496",
"Checkov by Prisma Cloud 3.2.497",
"Checkov by Prisma Cloud 3.2.498",
"Checkov by Prisma Cloud 3.2.499",
"Checkov by Prisma Cloud 3.2.500",
"Checkov by Prisma Cloud 3.2.501",
"Checkov by Prisma Cloud 3.2.502",
"Checkov by Prisma Cloud 3.2.503",
"Checkov by Prisma Cloud 3.2.504",
"Checkov by Prisma Cloud 3.2.505",
"Checkov by Prisma Cloud 3.2.506",
"Checkov by Prisma Cloud 3.2.507",
"Checkov by Prisma Cloud 3.2.508",
"Checkov by Prisma Cloud 3.2.509",
"Checkov by Prisma Cloud 3.2.510",
"Checkov by Prisma Cloud 3.2.511",
"Checkov by Prisma Cloud 3.2.512",
"Checkov by Prisma Cloud 3.2.513",
"Checkov by Prisma Cloud 3.2.514",
"Checkov by Prisma Cloud 3.2.515",
"Checkov by Prisma Cloud 3.2.516",
"Checkov by Prisma Cloud 3.2.517",
"Checkov by Prisma Cloud 3.2.518",
"Checkov by Prisma Cloud 3.2.519",
"Checkov by Prisma Cloud 3.2.520",
"Checkov by Prisma Cloud 3.2.521",
"Checkov by Prisma Cloud 3.2.522",
"Checkov by Prisma Cloud 3.2.523",
"Checkov by Prisma Cloud 3.2.524",
"Checkov by Prisma Cloud 3.2.525",
"Checkov by Prisma Cloud 3.2.526",
"Checkov by Prisma Cloud 3.2.527",
"Checkov by Prisma Cloud 3.2.528",
"Checkov by Prisma Cloud 3.2.529",
"Checkov by Prisma Cloud 3.2.530",
"Checkov by Prisma Cloud 3.2.531",
"Checkov by Prisma Cloud 3.2.532"
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2026-0311",
"datePublished": "2026-10-14T20:29:19.297Z",
"dateReserved": "2025-11-03T20:45:09.854Z",
"dateUpdated": "2026-10-15T16:43:45.351Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0312 (GCVE-0-2026-0312)
Vulnerability from cvelistv5
Published
2026-10-14 20:28
Modified
2026-10-15 18:40
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Version: 0 < 3.3.25 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0312",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-15T18:40:14.862502Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-15T18:40:29.605Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.3.25",
"status": "unaffected"
}
],
"lessThan": "3.3.25",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No special configuration is required to be affected by this issue."
}
],
"value": "No special configuration is required to be affected by this issue."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.3.25",
"versionStartIncluding": "3.3.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Muhammad Ibrahim"
},
{
"lang": "en",
"type": "finder",
"value": "Yuze Pan"
}
],
"datePublic": "2026-10-14T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003ePath traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.\u003c/span\u003e"
}
],
"value": "Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma\u00ae Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
}
],
"impacts": [
{
"capecId": "CAPEC-126",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-126 Path Traversal"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-14T20:28:18.276Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"name": "Checkov Security Advisory",
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2026-0312"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eCheckov by Prisma Cloud 3.3\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e3.2.0 through 3.3.24\u003c/td\u003e\u003ctd\u003eUpgrade to 3.3.25 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud 3.3\n3.2.0 through 3.3.24Upgrade to 3.3.25 or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-10-14T16:00:00.000Z",
"value": "Initial Publication."
}
],
"title": "Checkov by Prisma Cloud: Path Traversal Vulnerabilities",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003e\u003cspan\u003eUntil a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.\u003c/span\u003e\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"x_affectedList": [
"Checkov by Prisma Cloud 3.3.0",
"Checkov by Prisma Cloud 3.3.1",
"Checkov by Prisma Cloud 3.3.2",
"Checkov by Prisma Cloud 3.3.3",
"Checkov by Prisma Cloud 3.3.4",
"Checkov by Prisma Cloud 3.3.5",
"Checkov by Prisma Cloud 3.3.6",
"Checkov by Prisma Cloud 3.3.7",
"Checkov by Prisma Cloud 3.3.8",
"Checkov by Prisma Cloud 3.3.9",
"Checkov by Prisma Cloud 3.3.10",
"Checkov by Prisma Cloud 3.3.11",
"Checkov by Prisma Cloud 3.3.12",
"Checkov by Prisma Cloud 3.3.13",
"Checkov by Prisma Cloud 3.3.14",
"Checkov by Prisma Cloud 3.3.15",
"Checkov by Prisma Cloud 3.3.16",
"Checkov by Prisma Cloud 3.3.17",
"Checkov by Prisma Cloud 3.3.18",
"Checkov by Prisma Cloud 3.3.19",
"Checkov by Prisma Cloud 3.3.20",
"Checkov by Prisma Cloud 3.3.21",
"Checkov by Prisma Cloud 3.3.22",
"Checkov by Prisma Cloud 3.3.23",
"Checkov by Prisma Cloud 3.3.24"
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2026-0312",
"datePublished": "2026-10-14T20:28:18.276Z",
"dateReserved": "2025-11-03T20:45:11.196Z",
"dateUpdated": "2026-10-15T18:40:29.605Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0302 (GCVE-0-2026-0302)
Vulnerability from cvelistv5
Published
2026-09-10 06:05
Modified
2026-09-10 13:00
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Version: 3.2.0 < 3.2.502 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0302",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T13:00:38.190667Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T13:00:46.376Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.502",
"status": "unaffected"
}
],
"lessThan": "3.2.502",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No special configuration is required to be affected by this issue.\u0026nbsp;"
}
],
"value": "No special configuration is required to be affected by this issue."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.502",
"versionStartIncluding": "3.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Gherasim"
}
],
"datePublic": "2026-09-09T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov.\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88 OS Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 1.1,
"baseSeverity": "LOW",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "LOW",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user is able to influence input consumed by a Checkov scan."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T06:05:20.011Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2026-0302"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through\u0026nbsp;3.2.501\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.502 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through\u00a03.2.501\n Upgrade to 3.2.502 or later."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-09-09T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: OS Command Injection Vulnerability",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No known workarounds exist for this issue."
}
],
"value": "No known workarounds exist for this issue."
}
],
"x_affectedList": [
"Checkov by Prisma Cloud 3.2.0",
"Checkov by Prisma Cloud 3.2.1",
"Checkov by Prisma Cloud 3.2.2",
"Checkov by Prisma Cloud 3.2.3",
"Checkov by Prisma Cloud 3.2.4",
"Checkov by Prisma Cloud 3.2.5",
"Checkov by Prisma Cloud 3.2.6",
"Checkov by Prisma Cloud 3.2.7",
"Checkov by Prisma Cloud 3.2.8",
"Checkov by Prisma Cloud 3.2.9",
"Checkov by Prisma Cloud 3.2.10",
"Checkov by Prisma Cloud 3.2.11",
"Checkov by Prisma Cloud 3.2.12",
"Checkov by Prisma Cloud 3.2.13",
"Checkov by Prisma Cloud 3.2.14",
"Checkov by Prisma Cloud 3.2.15",
"Checkov by Prisma Cloud 3.2.16",
"Checkov by Prisma Cloud 3.2.17",
"Checkov by Prisma Cloud 3.2.18",
"Checkov by Prisma Cloud 3.2.19",
"Checkov by Prisma Cloud 3.2.20",
"Checkov by Prisma Cloud 3.2.21",
"Checkov by Prisma Cloud 3.2.22",
"Checkov by Prisma Cloud 3.2.23",
"Checkov by Prisma Cloud 3.2.24",
"Checkov by Prisma Cloud 3.2.25",
"Checkov by Prisma Cloud 3.2.26",
"Checkov by Prisma Cloud 3.2.27",
"Checkov by Prisma Cloud 3.2.28",
"Checkov by Prisma Cloud 3.2.29",
"Checkov by Prisma Cloud 3.2.30",
"Checkov by Prisma Cloud 3.2.31",
"Checkov by Prisma Cloud 3.2.32",
"Checkov by Prisma Cloud 3.2.33",
"Checkov by Prisma Cloud 3.2.34",
"Checkov by Prisma Cloud 3.2.35",
"Checkov by Prisma Cloud 3.2.36",
"Checkov by Prisma Cloud 3.2.37",
"Checkov by Prisma Cloud 3.2.38",
"Checkov by Prisma Cloud 3.2.39",
"Checkov by Prisma Cloud 3.2.40",
"Checkov by Prisma Cloud 3.2.41",
"Checkov by Prisma Cloud 3.2.42",
"Checkov by Prisma Cloud 3.2.43",
"Checkov by Prisma Cloud 3.2.44",
"Checkov by Prisma Cloud 3.2.45",
"Checkov by Prisma Cloud 3.2.46",
"Checkov by Prisma Cloud 3.2.47",
"Checkov by Prisma Cloud 3.2.48",
"Checkov by Prisma Cloud 3.2.49",
"Checkov by Prisma Cloud 3.2.50",
"Checkov by Prisma Cloud 3.2.51",
"Checkov by Prisma Cloud 3.2.52",
"Checkov by Prisma Cloud 3.2.53",
"Checkov by Prisma Cloud 3.2.54",
"Checkov by Prisma Cloud 3.2.55",
"Checkov by Prisma Cloud 3.2.56",
"Checkov by Prisma Cloud 3.2.57",
"Checkov by Prisma Cloud 3.2.58",
"Checkov by Prisma Cloud 3.2.59",
"Checkov by Prisma Cloud 3.2.60",
"Checkov by Prisma Cloud 3.2.61",
"Checkov by Prisma Cloud 3.2.62",
"Checkov by Prisma Cloud 3.2.63",
"Checkov by Prisma Cloud 3.2.64",
"Checkov by Prisma Cloud 3.2.65",
"Checkov by Prisma Cloud 3.2.66",
"Checkov by Prisma Cloud 3.2.67",
"Checkov by Prisma Cloud 3.2.68",
"Checkov by Prisma Cloud 3.2.69",
"Checkov by Prisma Cloud 3.2.70",
"Checkov by Prisma Cloud 3.2.71",
"Checkov by Prisma Cloud 3.2.72",
"Checkov by Prisma Cloud 3.2.73",
"Checkov by Prisma Cloud 3.2.74",
"Checkov by Prisma Cloud 3.2.75",
"Checkov by Prisma Cloud 3.2.76",
"Checkov by Prisma Cloud 3.2.77",
"Checkov by Prisma Cloud 3.2.78",
"Checkov by Prisma Cloud 3.2.79",
"Checkov by Prisma Cloud 3.2.80",
"Checkov by Prisma Cloud 3.2.81",
"Checkov by Prisma Cloud 3.2.82",
"Checkov by Prisma Cloud 3.2.83",
"Checkov by Prisma Cloud 3.2.84",
"Checkov by Prisma Cloud 3.2.85",
"Checkov by Prisma Cloud 3.2.86",
"Checkov by Prisma Cloud 3.2.87",
"Checkov by Prisma Cloud 3.2.88",
"Checkov by Prisma Cloud 3.2.89",
"Checkov by Prisma Cloud 3.2.90",
"Checkov by Prisma Cloud 3.2.91",
"Checkov by Prisma Cloud 3.2.92",
"Checkov by Prisma Cloud 3.2.93",
"Checkov by Prisma Cloud 3.2.94",
"Checkov by Prisma Cloud 3.2.95",
"Checkov by Prisma Cloud 3.2.96",
"Checkov by Prisma Cloud 3.2.97",
"Checkov by Prisma Cloud 3.2.98",
"Checkov by Prisma Cloud 3.2.99",
"Checkov by Prisma Cloud 3.2.100",
"Checkov by Prisma Cloud 3.2.101",
"Checkov by Prisma Cloud 3.2.102",
"Checkov by Prisma Cloud 3.2.103",
"Checkov by Prisma Cloud 3.2.104",
"Checkov by Prisma Cloud 3.2.105",
"Checkov by Prisma Cloud 3.2.106",
"Checkov by Prisma Cloud 3.2.107",
"Checkov by Prisma Cloud 3.2.108",
"Checkov by Prisma Cloud 3.2.109",
"Checkov by Prisma Cloud 3.2.110",
"Checkov by Prisma Cloud 3.2.111",
"Checkov by Prisma Cloud 3.2.112",
"Checkov by Prisma Cloud 3.2.113",
"Checkov by Prisma Cloud 3.2.114",
"Checkov by Prisma Cloud 3.2.115",
"Checkov by Prisma Cloud 3.2.116",
"Checkov by Prisma Cloud 3.2.117",
"Checkov by Prisma Cloud 3.2.118",
"Checkov by Prisma Cloud 3.2.119",
"Checkov by Prisma Cloud 3.2.120",
"Checkov by Prisma Cloud 3.2.121",
"Checkov by Prisma Cloud 3.2.122",
"Checkov by Prisma Cloud 3.2.123",
"Checkov by Prisma Cloud 3.2.124",
"Checkov by Prisma Cloud 3.2.125",
"Checkov by Prisma Cloud 3.2.126",
"Checkov by Prisma Cloud 3.2.127",
"Checkov by Prisma Cloud 3.2.128",
"Checkov by Prisma Cloud 3.2.129",
"Checkov by Prisma Cloud 3.2.130",
"Checkov by Prisma Cloud 3.2.131",
"Checkov by Prisma Cloud 3.2.132",
"Checkov by Prisma Cloud 3.2.133",
"Checkov by Prisma Cloud 3.2.134",
"Checkov by Prisma Cloud 3.2.135",
"Checkov by Prisma Cloud 3.2.136",
"Checkov by Prisma Cloud 3.2.137",
"Checkov by Prisma Cloud 3.2.138",
"Checkov by Prisma Cloud 3.2.139",
"Checkov by Prisma Cloud 3.2.140",
"Checkov by Prisma Cloud 3.2.141",
"Checkov by Prisma Cloud 3.2.142",
"Checkov by Prisma Cloud 3.2.143",
"Checkov by Prisma Cloud 3.2.144",
"Checkov by Prisma Cloud 3.2.145",
"Checkov by Prisma Cloud 3.2.146",
"Checkov by Prisma Cloud 3.2.147",
"Checkov by Prisma Cloud 3.2.148",
"Checkov by Prisma Cloud 3.2.149",
"Checkov by Prisma Cloud 3.2.150",
"Checkov by Prisma Cloud 3.2.151",
"Checkov by Prisma Cloud 3.2.152",
"Checkov by Prisma Cloud 3.2.153",
"Checkov by Prisma Cloud 3.2.154",
"Checkov by Prisma Cloud 3.2.155",
"Checkov by Prisma Cloud 3.2.156",
"Checkov by Prisma Cloud 3.2.157",
"Checkov by Prisma Cloud 3.2.158",
"Checkov by Prisma Cloud 3.2.159",
"Checkov by Prisma Cloud 3.2.160",
"Checkov by Prisma Cloud 3.2.161",
"Checkov by Prisma Cloud 3.2.162",
"Checkov by Prisma Cloud 3.2.163",
"Checkov by Prisma Cloud 3.2.164",
"Checkov by Prisma Cloud 3.2.165",
"Checkov by Prisma Cloud 3.2.166",
"Checkov by Prisma Cloud 3.2.167",
"Checkov by Prisma Cloud 3.2.168",
"Checkov by Prisma Cloud 3.2.169",
"Checkov by Prisma Cloud 3.2.170",
"Checkov by Prisma Cloud 3.2.171",
"Checkov by Prisma Cloud 3.2.172",
"Checkov by Prisma Cloud 3.2.173",
"Checkov by Prisma Cloud 3.2.174",
"Checkov by Prisma Cloud 3.2.175",
"Checkov by Prisma Cloud 3.2.176",
"Checkov by Prisma Cloud 3.2.177",
"Checkov by Prisma Cloud 3.2.178",
"Checkov by Prisma Cloud 3.2.179",
"Checkov by Prisma Cloud 3.2.180",
"Checkov by Prisma Cloud 3.2.181",
"Checkov by Prisma Cloud 3.2.182",
"Checkov by Prisma Cloud 3.2.183",
"Checkov by Prisma Cloud 3.2.184",
"Checkov by Prisma Cloud 3.2.185",
"Checkov by Prisma Cloud 3.2.186",
"Checkov by Prisma Cloud 3.2.187",
"Checkov by Prisma Cloud 3.2.188",
"Checkov by Prisma Cloud 3.2.189",
"Checkov by Prisma Cloud 3.2.190",
"Checkov by Prisma Cloud 3.2.191",
"Checkov by Prisma Cloud 3.2.192",
"Checkov by Prisma Cloud 3.2.193",
"Checkov by Prisma Cloud 3.2.194",
"Checkov by Prisma Cloud 3.2.195",
"Checkov by Prisma Cloud 3.2.196",
"Checkov by Prisma Cloud 3.2.197",
"Checkov by Prisma Cloud 3.2.198",
"Checkov by Prisma Cloud 3.2.199",
"Checkov by Prisma Cloud 3.2.200",
"Checkov by Prisma Cloud 3.2.201",
"Checkov by Prisma Cloud 3.2.202",
"Checkov by Prisma Cloud 3.2.203",
"Checkov by Prisma Cloud 3.2.204",
"Checkov by Prisma Cloud 3.2.205",
"Checkov by Prisma Cloud 3.2.206",
"Checkov by Prisma Cloud 3.2.207",
"Checkov by Prisma Cloud 3.2.208",
"Checkov by Prisma Cloud 3.2.209",
"Checkov by Prisma Cloud 3.2.210",
"Checkov by Prisma Cloud 3.2.211",
"Checkov by Prisma Cloud 3.2.212",
"Checkov by Prisma Cloud 3.2.213",
"Checkov by Prisma Cloud 3.2.214",
"Checkov by Prisma Cloud 3.2.215",
"Checkov by Prisma Cloud 3.2.216",
"Checkov by Prisma Cloud 3.2.217",
"Checkov by Prisma Cloud 3.2.218",
"Checkov by Prisma Cloud 3.2.219",
"Checkov by Prisma Cloud 3.2.220",
"Checkov by Prisma Cloud 3.2.221",
"Checkov by Prisma Cloud 3.2.222",
"Checkov by Prisma Cloud 3.2.223",
"Checkov by Prisma Cloud 3.2.224",
"Checkov by Prisma Cloud 3.2.225",
"Checkov by Prisma Cloud 3.2.226",
"Checkov by Prisma Cloud 3.2.227",
"Checkov by Prisma Cloud 3.2.228",
"Checkov by Prisma Cloud 3.2.229",
"Checkov by Prisma Cloud 3.2.230",
"Checkov by Prisma Cloud 3.2.231",
"Checkov by Prisma Cloud 3.2.232",
"Checkov by Prisma Cloud 3.2.233",
"Checkov by Prisma Cloud 3.2.234",
"Checkov by Prisma Cloud 3.2.235",
"Checkov by Prisma Cloud 3.2.236",
"Checkov by Prisma Cloud 3.2.237",
"Checkov by Prisma Cloud 3.2.238",
"Checkov by Prisma Cloud 3.2.239",
"Checkov by Prisma Cloud 3.2.240",
"Checkov by Prisma Cloud 3.2.241",
"Checkov by Prisma Cloud 3.2.242",
"Checkov by Prisma Cloud 3.2.243",
"Checkov by Prisma Cloud 3.2.244",
"Checkov by Prisma Cloud 3.2.245",
"Checkov by Prisma Cloud 3.2.246",
"Checkov by Prisma Cloud 3.2.247",
"Checkov by Prisma Cloud 3.2.248",
"Checkov by Prisma Cloud 3.2.249",
"Checkov by Prisma Cloud 3.2.250",
"Checkov by Prisma Cloud 3.2.251",
"Checkov by Prisma Cloud 3.2.252",
"Checkov by Prisma Cloud 3.2.253",
"Checkov by Prisma Cloud 3.2.254",
"Checkov by Prisma Cloud 3.2.255",
"Checkov by Prisma Cloud 3.2.256",
"Checkov by Prisma Cloud 3.2.257",
"Checkov by Prisma Cloud 3.2.258",
"Checkov by Prisma Cloud 3.2.259",
"Checkov by Prisma Cloud 3.2.260",
"Checkov by Prisma Cloud 3.2.261",
"Checkov by Prisma Cloud 3.2.262",
"Checkov by Prisma Cloud 3.2.263",
"Checkov by Prisma Cloud 3.2.264",
"Checkov by Prisma Cloud 3.2.265",
"Checkov by Prisma Cloud 3.2.266",
"Checkov by Prisma Cloud 3.2.267",
"Checkov by Prisma Cloud 3.2.268",
"Checkov by Prisma Cloud 3.2.269",
"Checkov by Prisma Cloud 3.2.270",
"Checkov by Prisma Cloud 3.2.271",
"Checkov by Prisma Cloud 3.2.272",
"Checkov by Prisma Cloud 3.2.273",
"Checkov by Prisma Cloud 3.2.274",
"Checkov by Prisma Cloud 3.2.275",
"Checkov by Prisma Cloud 3.2.276",
"Checkov by Prisma Cloud 3.2.277",
"Checkov by Prisma Cloud 3.2.278",
"Checkov by Prisma Cloud 3.2.279",
"Checkov by Prisma Cloud 3.2.280",
"Checkov by Prisma Cloud 3.2.281",
"Checkov by Prisma Cloud 3.2.282",
"Checkov by Prisma Cloud 3.2.283",
"Checkov by Prisma Cloud 3.2.284",
"Checkov by Prisma Cloud 3.2.285",
"Checkov by Prisma Cloud 3.2.286",
"Checkov by Prisma Cloud 3.2.287",
"Checkov by Prisma Cloud 3.2.288",
"Checkov by Prisma Cloud 3.2.289",
"Checkov by Prisma Cloud 3.2.290",
"Checkov by Prisma Cloud 3.2.291",
"Checkov by Prisma Cloud 3.2.292",
"Checkov by Prisma Cloud 3.2.293",
"Checkov by Prisma Cloud 3.2.294",
"Checkov by Prisma Cloud 3.2.295",
"Checkov by Prisma Cloud 3.2.296",
"Checkov by Prisma Cloud 3.2.297",
"Checkov by Prisma Cloud 3.2.298",
"Checkov by Prisma Cloud 3.2.299",
"Checkov by Prisma Cloud 3.2.300",
"Checkov by Prisma Cloud 3.2.301",
"Checkov by Prisma Cloud 3.2.302",
"Checkov by Prisma Cloud 3.2.303",
"Checkov by Prisma Cloud 3.2.304",
"Checkov by Prisma Cloud 3.2.305",
"Checkov by Prisma Cloud 3.2.306",
"Checkov by Prisma Cloud 3.2.307",
"Checkov by Prisma Cloud 3.2.308",
"Checkov by Prisma Cloud 3.2.309",
"Checkov by Prisma Cloud 3.2.310",
"Checkov by Prisma Cloud 3.2.311",
"Checkov by Prisma Cloud 3.2.312",
"Checkov by Prisma Cloud 3.2.313",
"Checkov by Prisma Cloud 3.2.314",
"Checkov by Prisma Cloud 3.2.315",
"Checkov by Prisma Cloud 3.2.316",
"Checkov by Prisma Cloud 3.2.317",
"Checkov by Prisma Cloud 3.2.318",
"Checkov by Prisma Cloud 3.2.319",
"Checkov by Prisma Cloud 3.2.320",
"Checkov by Prisma Cloud 3.2.321",
"Checkov by Prisma Cloud 3.2.322",
"Checkov by Prisma Cloud 3.2.323",
"Checkov by Prisma Cloud 3.2.324",
"Checkov by Prisma Cloud 3.2.325",
"Checkov by Prisma Cloud 3.2.326",
"Checkov by Prisma Cloud 3.2.327",
"Checkov by Prisma Cloud 3.2.328",
"Checkov by Prisma Cloud 3.2.329",
"Checkov by Prisma Cloud 3.2.330",
"Checkov by Prisma Cloud 3.2.331",
"Checkov by Prisma Cloud 3.2.332",
"Checkov by Prisma Cloud 3.2.333",
"Checkov by Prisma Cloud 3.2.334",
"Checkov by Prisma Cloud 3.2.335",
"Checkov by Prisma Cloud 3.2.336",
"Checkov by Prisma Cloud 3.2.337",
"Checkov by Prisma Cloud 3.2.338",
"Checkov by Prisma Cloud 3.2.339",
"Checkov by Prisma Cloud 3.2.340",
"Checkov by Prisma Cloud 3.2.341",
"Checkov by Prisma Cloud 3.2.342",
"Checkov by Prisma Cloud 3.2.343",
"Checkov by Prisma Cloud 3.2.344",
"Checkov by Prisma Cloud 3.2.345",
"Checkov by Prisma Cloud 3.2.346",
"Checkov by Prisma Cloud 3.2.347",
"Checkov by Prisma Cloud 3.2.348",
"Checkov by Prisma Cloud 3.2.349",
"Checkov by Prisma Cloud 3.2.350",
"Checkov by Prisma Cloud 3.2.351",
"Checkov by Prisma Cloud 3.2.352",
"Checkov by Prisma Cloud 3.2.353",
"Checkov by Prisma Cloud 3.2.354",
"Checkov by Prisma Cloud 3.2.355",
"Checkov by Prisma Cloud 3.2.356",
"Checkov by Prisma Cloud 3.2.357",
"Checkov by Prisma Cloud 3.2.358",
"Checkov by Prisma Cloud 3.2.359",
"Checkov by Prisma Cloud 3.2.360",
"Checkov by Prisma Cloud 3.2.361",
"Checkov by Prisma Cloud 3.2.362",
"Checkov by Prisma Cloud 3.2.363",
"Checkov by Prisma Cloud 3.2.364",
"Checkov by Prisma Cloud 3.2.365",
"Checkov by Prisma Cloud 3.2.366",
"Checkov by Prisma Cloud 3.2.367",
"Checkov by Prisma Cloud 3.2.368",
"Checkov by Prisma Cloud 3.2.369",
"Checkov by Prisma Cloud 3.2.370",
"Checkov by Prisma Cloud 3.2.371",
"Checkov by Prisma Cloud 3.2.372",
"Checkov by Prisma Cloud 3.2.373",
"Checkov by Prisma Cloud 3.2.374",
"Checkov by Prisma Cloud 3.2.375",
"Checkov by Prisma Cloud 3.2.376",
"Checkov by Prisma Cloud 3.2.377",
"Checkov by Prisma Cloud 3.2.378",
"Checkov by Prisma Cloud 3.2.379",
"Checkov by Prisma Cloud 3.2.380",
"Checkov by Prisma Cloud 3.2.381",
"Checkov by Prisma Cloud 3.2.382",
"Checkov by Prisma Cloud 3.2.383",
"Checkov by Prisma Cloud 3.2.384",
"Checkov by Prisma Cloud 3.2.385",
"Checkov by Prisma Cloud 3.2.386",
"Checkov by Prisma Cloud 3.2.387",
"Checkov by Prisma Cloud 3.2.388",
"Checkov by Prisma Cloud 3.2.389",
"Checkov by Prisma Cloud 3.2.390",
"Checkov by Prisma Cloud 3.2.391",
"Checkov by Prisma Cloud 3.2.392",
"Checkov by Prisma Cloud 3.2.393",
"Checkov by Prisma Cloud 3.2.394",
"Checkov by Prisma Cloud 3.2.395",
"Checkov by Prisma Cloud 3.2.396",
"Checkov by Prisma Cloud 3.2.397",
"Checkov by Prisma Cloud 3.2.398",
"Checkov by Prisma Cloud 3.2.399",
"Checkov by Prisma Cloud 3.2.400",
"Checkov by Prisma Cloud 3.2.401",
"Checkov by Prisma Cloud 3.2.402",
"Checkov by Prisma Cloud 3.2.403",
"Checkov by Prisma Cloud 3.2.404",
"Checkov by Prisma Cloud 3.2.405",
"Checkov by Prisma Cloud 3.2.406",
"Checkov by Prisma Cloud 3.2.407",
"Checkov by Prisma Cloud 3.2.408",
"Checkov by Prisma Cloud 3.2.409",
"Checkov by Prisma Cloud 3.2.410",
"Checkov by Prisma Cloud 3.2.411",
"Checkov by Prisma Cloud 3.2.412",
"Checkov by Prisma Cloud 3.2.413",
"Checkov by Prisma Cloud 3.2.414",
"Checkov by Prisma Cloud 3.2.415",
"Checkov by Prisma Cloud 3.2.416",
"Checkov by Prisma Cloud 3.2.417",
"Checkov by Prisma Cloud 3.2.418",
"Checkov by Prisma Cloud 3.2.419",
"Checkov by Prisma Cloud 3.2.420",
"Checkov by Prisma Cloud 3.2.421",
"Checkov by Prisma Cloud 3.2.422",
"Checkov by Prisma Cloud 3.2.423",
"Checkov by Prisma Cloud 3.2.424",
"Checkov by Prisma Cloud 3.2.425",
"Checkov by Prisma Cloud 3.2.426",
"Checkov by Prisma Cloud 3.2.427",
"Checkov by Prisma Cloud 3.2.428",
"Checkov by Prisma Cloud 3.2.429",
"Checkov by Prisma Cloud 3.2.430",
"Checkov by Prisma Cloud 3.2.431",
"Checkov by Prisma Cloud 3.2.432",
"Checkov by Prisma Cloud 3.2.433",
"Checkov by Prisma Cloud 3.2.434",
"Checkov by Prisma Cloud 3.2.435",
"Checkov by Prisma Cloud 3.2.436",
"Checkov by Prisma Cloud 3.2.437",
"Checkov by Prisma Cloud 3.2.438",
"Checkov by Prisma Cloud 3.2.439",
"Checkov by Prisma Cloud 3.2.440",
"Checkov by Prisma Cloud 3.2.441",
"Checkov by Prisma Cloud 3.2.442",
"Checkov by Prisma Cloud 3.2.443",
"Checkov by Prisma Cloud 3.2.444",
"Checkov by Prisma Cloud 3.2.445",
"Checkov by Prisma Cloud 3.2.446",
"Checkov by Prisma Cloud 3.2.447",
"Checkov by Prisma Cloud 3.2.448",
"Checkov by Prisma Cloud 3.2.449",
"Checkov by Prisma Cloud 3.2.450",
"Checkov by Prisma Cloud 3.2.451",
"Checkov by Prisma Cloud 3.2.452",
"Checkov by Prisma Cloud 3.2.453",
"Checkov by Prisma Cloud 3.2.454",
"Checkov by Prisma Cloud 3.2.455",
"Checkov by Prisma Cloud 3.2.456",
"Checkov by Prisma Cloud 3.2.457",
"Checkov by Prisma Cloud 3.2.458",
"Checkov by Prisma Cloud 3.2.459",
"Checkov by Prisma Cloud 3.2.460",
"Checkov by Prisma Cloud 3.2.461",
"Checkov by Prisma Cloud 3.2.462",
"Checkov by Prisma Cloud 3.2.463",
"Checkov by Prisma Cloud 3.2.464",
"Checkov by Prisma Cloud 3.2.465",
"Checkov by Prisma Cloud 3.2.466",
"Checkov by Prisma Cloud 3.2.467",
"Checkov by Prisma Cloud 3.2.468",
"Checkov by Prisma Cloud 3.2.469",
"Checkov by Prisma Cloud 3.2.470",
"Checkov by Prisma Cloud 3.2.471",
"Checkov by Prisma Cloud 3.2.472",
"Checkov by Prisma Cloud 3.2.473",
"Checkov by Prisma Cloud 3.2.474",
"Checkov by Prisma Cloud 3.2.475",
"Checkov by Prisma Cloud 3.2.476",
"Checkov by Prisma Cloud 3.2.477",
"Checkov by Prisma Cloud 3.2.478",
"Checkov by Prisma Cloud 3.2.479",
"Checkov by Prisma Cloud 3.2.480",
"Checkov by Prisma Cloud 3.2.481",
"Checkov by Prisma Cloud 3.2.482",
"Checkov by Prisma Cloud 3.2.483",
"Checkov by Prisma Cloud 3.2.484",
"Checkov by Prisma Cloud 3.2.485",
"Checkov by Prisma Cloud 3.2.486",
"Checkov by Prisma Cloud 3.2.487",
"Checkov by Prisma Cloud 3.2.488",
"Checkov by Prisma Cloud 3.2.489",
"Checkov by Prisma Cloud 3.2.490",
"Checkov by Prisma Cloud 3.2.491",
"Checkov by Prisma Cloud 3.2.492",
"Checkov by Prisma Cloud 3.2.493",
"Checkov by Prisma Cloud 3.2.494",
"Checkov by Prisma Cloud 3.2.495",
"Checkov by Prisma Cloud 3.2.496",
"Checkov by Prisma Cloud 3.2.497",
"Checkov by Prisma Cloud 3.2.498",
"Checkov by Prisma Cloud 3.2.499",
"Checkov by Prisma Cloud 3.2.500",
"Checkov by Prisma Cloud 3.2.501"
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2026-0302",
"datePublished": "2026-09-10T06:05:20.011Z",
"dateReserved": "2025-11-03T20:45:00.329Z",
"dateUpdated": "2026-09-10T13:00:46.376Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0303 (GCVE-0-2026-0303)
Vulnerability from cvelistv5
Published
2026-09-10 06:03
Modified
2026-09-10 13:01
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-829 - Inclusion of Functionality from Untrusted Control Sphere
Summary
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Version: 3.2.0 < 3.2.532 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0303",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T13:01:15.631812Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T13:01:27.361Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.532",
"status": "unaffected"
}
],
"lessThan": "3.2.532",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
}
],
"value": "No special configuration is required to be vulnerable to this issue."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.532",
"versionStartIncluding": "3.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Michael Adedeji"
}
],
"datePublic": "2026-09-09T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 2.4,
"baseSeverity": "LOW",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-829",
"description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T06:03:50.513Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2026-0303"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.531\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.532or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.531\n Upgrade to 3.2.532or later.\n \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-09-09T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"x_affectedList": [
"Checkov by Prisma Cloud 3.2.0",
"Checkov by Prisma Cloud 3.2.1",
"Checkov by Prisma Cloud 3.2.2",
"Checkov by Prisma Cloud 3.2.3",
"Checkov by Prisma Cloud 3.2.4",
"Checkov by Prisma Cloud 3.2.5",
"Checkov by Prisma Cloud 3.2.6",
"Checkov by Prisma Cloud 3.2.7",
"Checkov by Prisma Cloud 3.2.8",
"Checkov by Prisma Cloud 3.2.9",
"Checkov by Prisma Cloud 3.2.10",
"Checkov by Prisma Cloud 3.2.11",
"Checkov by Prisma Cloud 3.2.12",
"Checkov by Prisma Cloud 3.2.13",
"Checkov by Prisma Cloud 3.2.14",
"Checkov by Prisma Cloud 3.2.15",
"Checkov by Prisma Cloud 3.2.16",
"Checkov by Prisma Cloud 3.2.17",
"Checkov by Prisma Cloud 3.2.18",
"Checkov by Prisma Cloud 3.2.19",
"Checkov by Prisma Cloud 3.2.20",
"Checkov by Prisma Cloud 3.2.21",
"Checkov by Prisma Cloud 3.2.22",
"Checkov by Prisma Cloud 3.2.23",
"Checkov by Prisma Cloud 3.2.24",
"Checkov by Prisma Cloud 3.2.25",
"Checkov by Prisma Cloud 3.2.26",
"Checkov by Prisma Cloud 3.2.27",
"Checkov by Prisma Cloud 3.2.28",
"Checkov by Prisma Cloud 3.2.29",
"Checkov by Prisma Cloud 3.2.30",
"Checkov by Prisma Cloud 3.2.31",
"Checkov by Prisma Cloud 3.2.32",
"Checkov by Prisma Cloud 3.2.33",
"Checkov by Prisma Cloud 3.2.34",
"Checkov by Prisma Cloud 3.2.35",
"Checkov by Prisma Cloud 3.2.36",
"Checkov by Prisma Cloud 3.2.37",
"Checkov by Prisma Cloud 3.2.38",
"Checkov by Prisma Cloud 3.2.39",
"Checkov by Prisma Cloud 3.2.40",
"Checkov by Prisma Cloud 3.2.41",
"Checkov by Prisma Cloud 3.2.42",
"Checkov by Prisma Cloud 3.2.43",
"Checkov by Prisma Cloud 3.2.44",
"Checkov by Prisma Cloud 3.2.45",
"Checkov by Prisma Cloud 3.2.46",
"Checkov by Prisma Cloud 3.2.47",
"Checkov by Prisma Cloud 3.2.48",
"Checkov by Prisma Cloud 3.2.49",
"Checkov by Prisma Cloud 3.2.50",
"Checkov by Prisma Cloud 3.2.51",
"Checkov by Prisma Cloud 3.2.52",
"Checkov by Prisma Cloud 3.2.53",
"Checkov by Prisma Cloud 3.2.54",
"Checkov by Prisma Cloud 3.2.55",
"Checkov by Prisma Cloud 3.2.56",
"Checkov by Prisma Cloud 3.2.57",
"Checkov by Prisma Cloud 3.2.58",
"Checkov by Prisma Cloud 3.2.59",
"Checkov by Prisma Cloud 3.2.60",
"Checkov by Prisma Cloud 3.2.61",
"Checkov by Prisma Cloud 3.2.62",
"Checkov by Prisma Cloud 3.2.63",
"Checkov by Prisma Cloud 3.2.64",
"Checkov by Prisma Cloud 3.2.65",
"Checkov by Prisma Cloud 3.2.66",
"Checkov by Prisma Cloud 3.2.67",
"Checkov by Prisma Cloud 3.2.68",
"Checkov by Prisma Cloud 3.2.69",
"Checkov by Prisma Cloud 3.2.70",
"Checkov by Prisma Cloud 3.2.71",
"Checkov by Prisma Cloud 3.2.72",
"Checkov by Prisma Cloud 3.2.73",
"Checkov by Prisma Cloud 3.2.74",
"Checkov by Prisma Cloud 3.2.75",
"Checkov by Prisma Cloud 3.2.76",
"Checkov by Prisma Cloud 3.2.77",
"Checkov by Prisma Cloud 3.2.78",
"Checkov by Prisma Cloud 3.2.79",
"Checkov by Prisma Cloud 3.2.80",
"Checkov by Prisma Cloud 3.2.81",
"Checkov by Prisma Cloud 3.2.82",
"Checkov by Prisma Cloud 3.2.83",
"Checkov by Prisma Cloud 3.2.84",
"Checkov by Prisma Cloud 3.2.85",
"Checkov by Prisma Cloud 3.2.86",
"Checkov by Prisma Cloud 3.2.87",
"Checkov by Prisma Cloud 3.2.88",
"Checkov by Prisma Cloud 3.2.89",
"Checkov by Prisma Cloud 3.2.90",
"Checkov by Prisma Cloud 3.2.91",
"Checkov by Prisma Cloud 3.2.92",
"Checkov by Prisma Cloud 3.2.93",
"Checkov by Prisma Cloud 3.2.94",
"Checkov by Prisma Cloud 3.2.95",
"Checkov by Prisma Cloud 3.2.96",
"Checkov by Prisma Cloud 3.2.97",
"Checkov by Prisma Cloud 3.2.98",
"Checkov by Prisma Cloud 3.2.99",
"Checkov by Prisma Cloud 3.2.100",
"Checkov by Prisma Cloud 3.2.101",
"Checkov by Prisma Cloud 3.2.102",
"Checkov by Prisma Cloud 3.2.103",
"Checkov by Prisma Cloud 3.2.104",
"Checkov by Prisma Cloud 3.2.105",
"Checkov by Prisma Cloud 3.2.106",
"Checkov by Prisma Cloud 3.2.107",
"Checkov by Prisma Cloud 3.2.108",
"Checkov by Prisma Cloud 3.2.109",
"Checkov by Prisma Cloud 3.2.110",
"Checkov by Prisma Cloud 3.2.111",
"Checkov by Prisma Cloud 3.2.112",
"Checkov by Prisma Cloud 3.2.113",
"Checkov by Prisma Cloud 3.2.114",
"Checkov by Prisma Cloud 3.2.115",
"Checkov by Prisma Cloud 3.2.116",
"Checkov by Prisma Cloud 3.2.117",
"Checkov by Prisma Cloud 3.2.118",
"Checkov by Prisma Cloud 3.2.119",
"Checkov by Prisma Cloud 3.2.120",
"Checkov by Prisma Cloud 3.2.121",
"Checkov by Prisma Cloud 3.2.122",
"Checkov by Prisma Cloud 3.2.123",
"Checkov by Prisma Cloud 3.2.124",
"Checkov by Prisma Cloud 3.2.125",
"Checkov by Prisma Cloud 3.2.126",
"Checkov by Prisma Cloud 3.2.127",
"Checkov by Prisma Cloud 3.2.128",
"Checkov by Prisma Cloud 3.2.129",
"Checkov by Prisma Cloud 3.2.130",
"Checkov by Prisma Cloud 3.2.131",
"Checkov by Prisma Cloud 3.2.132",
"Checkov by Prisma Cloud 3.2.133",
"Checkov by Prisma Cloud 3.2.134",
"Checkov by Prisma Cloud 3.2.135",
"Checkov by Prisma Cloud 3.2.136",
"Checkov by Prisma Cloud 3.2.137",
"Checkov by Prisma Cloud 3.2.138",
"Checkov by Prisma Cloud 3.2.139",
"Checkov by Prisma Cloud 3.2.140",
"Checkov by Prisma Cloud 3.2.141",
"Checkov by Prisma Cloud 3.2.142",
"Checkov by Prisma Cloud 3.2.143",
"Checkov by Prisma Cloud 3.2.144",
"Checkov by Prisma Cloud 3.2.145",
"Checkov by Prisma Cloud 3.2.146",
"Checkov by Prisma Cloud 3.2.147",
"Checkov by Prisma Cloud 3.2.148",
"Checkov by Prisma Cloud 3.2.149",
"Checkov by Prisma Cloud 3.2.150",
"Checkov by Prisma Cloud 3.2.151",
"Checkov by Prisma Cloud 3.2.152",
"Checkov by Prisma Cloud 3.2.153",
"Checkov by Prisma Cloud 3.2.154",
"Checkov by Prisma Cloud 3.2.155",
"Checkov by Prisma Cloud 3.2.156",
"Checkov by Prisma Cloud 3.2.157",
"Checkov by Prisma Cloud 3.2.158",
"Checkov by Prisma Cloud 3.2.159",
"Checkov by Prisma Cloud 3.2.160",
"Checkov by Prisma Cloud 3.2.161",
"Checkov by Prisma Cloud 3.2.162",
"Checkov by Prisma Cloud 3.2.163",
"Checkov by Prisma Cloud 3.2.164",
"Checkov by Prisma Cloud 3.2.165",
"Checkov by Prisma Cloud 3.2.166",
"Checkov by Prisma Cloud 3.2.167",
"Checkov by Prisma Cloud 3.2.168",
"Checkov by Prisma Cloud 3.2.169",
"Checkov by Prisma Cloud 3.2.170",
"Checkov by Prisma Cloud 3.2.171",
"Checkov by Prisma Cloud 3.2.172",
"Checkov by Prisma Cloud 3.2.173",
"Checkov by Prisma Cloud 3.2.174",
"Checkov by Prisma Cloud 3.2.175",
"Checkov by Prisma Cloud 3.2.176",
"Checkov by Prisma Cloud 3.2.177",
"Checkov by Prisma Cloud 3.2.178",
"Checkov by Prisma Cloud 3.2.179",
"Checkov by Prisma Cloud 3.2.180",
"Checkov by Prisma Cloud 3.2.181",
"Checkov by Prisma Cloud 3.2.182",
"Checkov by Prisma Cloud 3.2.183",
"Checkov by Prisma Cloud 3.2.184",
"Checkov by Prisma Cloud 3.2.185",
"Checkov by Prisma Cloud 3.2.186",
"Checkov by Prisma Cloud 3.2.187",
"Checkov by Prisma Cloud 3.2.188",
"Checkov by Prisma Cloud 3.2.189",
"Checkov by Prisma Cloud 3.2.190",
"Checkov by Prisma Cloud 3.2.191",
"Checkov by Prisma Cloud 3.2.192",
"Checkov by Prisma Cloud 3.2.193",
"Checkov by Prisma Cloud 3.2.194",
"Checkov by Prisma Cloud 3.2.195",
"Checkov by Prisma Cloud 3.2.196",
"Checkov by Prisma Cloud 3.2.197",
"Checkov by Prisma Cloud 3.2.198",
"Checkov by Prisma Cloud 3.2.199",
"Checkov by Prisma Cloud 3.2.200",
"Checkov by Prisma Cloud 3.2.201",
"Checkov by Prisma Cloud 3.2.202",
"Checkov by Prisma Cloud 3.2.203",
"Checkov by Prisma Cloud 3.2.204",
"Checkov by Prisma Cloud 3.2.205",
"Checkov by Prisma Cloud 3.2.206",
"Checkov by Prisma Cloud 3.2.207",
"Checkov by Prisma Cloud 3.2.208",
"Checkov by Prisma Cloud 3.2.209",
"Checkov by Prisma Cloud 3.2.210",
"Checkov by Prisma Cloud 3.2.211",
"Checkov by Prisma Cloud 3.2.212",
"Checkov by Prisma Cloud 3.2.213",
"Checkov by Prisma Cloud 3.2.214",
"Checkov by Prisma Cloud 3.2.215",
"Checkov by Prisma Cloud 3.2.216",
"Checkov by Prisma Cloud 3.2.217",
"Checkov by Prisma Cloud 3.2.218",
"Checkov by Prisma Cloud 3.2.219",
"Checkov by Prisma Cloud 3.2.220",
"Checkov by Prisma Cloud 3.2.221",
"Checkov by Prisma Cloud 3.2.222",
"Checkov by Prisma Cloud 3.2.223",
"Checkov by Prisma Cloud 3.2.224",
"Checkov by Prisma Cloud 3.2.225",
"Checkov by Prisma Cloud 3.2.226",
"Checkov by Prisma Cloud 3.2.227",
"Checkov by Prisma Cloud 3.2.228",
"Checkov by Prisma Cloud 3.2.229",
"Checkov by Prisma Cloud 3.2.230",
"Checkov by Prisma Cloud 3.2.231",
"Checkov by Prisma Cloud 3.2.232",
"Checkov by Prisma Cloud 3.2.233",
"Checkov by Prisma Cloud 3.2.234",
"Checkov by Prisma Cloud 3.2.235",
"Checkov by Prisma Cloud 3.2.236",
"Checkov by Prisma Cloud 3.2.237",
"Checkov by Prisma Cloud 3.2.238",
"Checkov by Prisma Cloud 3.2.239",
"Checkov by Prisma Cloud 3.2.240",
"Checkov by Prisma Cloud 3.2.241",
"Checkov by Prisma Cloud 3.2.242",
"Checkov by Prisma Cloud 3.2.243",
"Checkov by Prisma Cloud 3.2.244",
"Checkov by Prisma Cloud 3.2.245",
"Checkov by Prisma Cloud 3.2.246",
"Checkov by Prisma Cloud 3.2.247",
"Checkov by Prisma Cloud 3.2.248",
"Checkov by Prisma Cloud 3.2.249",
"Checkov by Prisma Cloud 3.2.250",
"Checkov by Prisma Cloud 3.2.251",
"Checkov by Prisma Cloud 3.2.252",
"Checkov by Prisma Cloud 3.2.253",
"Checkov by Prisma Cloud 3.2.254",
"Checkov by Prisma Cloud 3.2.255",
"Checkov by Prisma Cloud 3.2.256",
"Checkov by Prisma Cloud 3.2.257",
"Checkov by Prisma Cloud 3.2.258",
"Checkov by Prisma Cloud 3.2.259",
"Checkov by Prisma Cloud 3.2.260",
"Checkov by Prisma Cloud 3.2.261",
"Checkov by Prisma Cloud 3.2.262",
"Checkov by Prisma Cloud 3.2.263",
"Checkov by Prisma Cloud 3.2.264",
"Checkov by Prisma Cloud 3.2.265",
"Checkov by Prisma Cloud 3.2.266",
"Checkov by Prisma Cloud 3.2.267",
"Checkov by Prisma Cloud 3.2.268",
"Checkov by Prisma Cloud 3.2.269",
"Checkov by Prisma Cloud 3.2.270",
"Checkov by Prisma Cloud 3.2.271",
"Checkov by Prisma Cloud 3.2.272",
"Checkov by Prisma Cloud 3.2.273",
"Checkov by Prisma Cloud 3.2.274",
"Checkov by Prisma Cloud 3.2.275",
"Checkov by Prisma Cloud 3.2.276",
"Checkov by Prisma Cloud 3.2.277",
"Checkov by Prisma Cloud 3.2.278",
"Checkov by Prisma Cloud 3.2.279",
"Checkov by Prisma Cloud 3.2.280",
"Checkov by Prisma Cloud 3.2.281",
"Checkov by Prisma Cloud 3.2.282",
"Checkov by Prisma Cloud 3.2.283",
"Checkov by Prisma Cloud 3.2.284",
"Checkov by Prisma Cloud 3.2.285",
"Checkov by Prisma Cloud 3.2.286",
"Checkov by Prisma Cloud 3.2.287",
"Checkov by Prisma Cloud 3.2.288",
"Checkov by Prisma Cloud 3.2.289",
"Checkov by Prisma Cloud 3.2.290",
"Checkov by Prisma Cloud 3.2.291",
"Checkov by Prisma Cloud 3.2.292",
"Checkov by Prisma Cloud 3.2.293",
"Checkov by Prisma Cloud 3.2.294",
"Checkov by Prisma Cloud 3.2.295",
"Checkov by Prisma Cloud 3.2.296",
"Checkov by Prisma Cloud 3.2.297",
"Checkov by Prisma Cloud 3.2.298",
"Checkov by Prisma Cloud 3.2.299",
"Checkov by Prisma Cloud 3.2.300",
"Checkov by Prisma Cloud 3.2.301",
"Checkov by Prisma Cloud 3.2.302",
"Checkov by Prisma Cloud 3.2.303",
"Checkov by Prisma Cloud 3.2.304",
"Checkov by Prisma Cloud 3.2.305",
"Checkov by Prisma Cloud 3.2.306",
"Checkov by Prisma Cloud 3.2.307",
"Checkov by Prisma Cloud 3.2.308",
"Checkov by Prisma Cloud 3.2.309",
"Checkov by Prisma Cloud 3.2.310",
"Checkov by Prisma Cloud 3.2.311",
"Checkov by Prisma Cloud 3.2.312",
"Checkov by Prisma Cloud 3.2.313",
"Checkov by Prisma Cloud 3.2.314",
"Checkov by Prisma Cloud 3.2.315",
"Checkov by Prisma Cloud 3.2.316",
"Checkov by Prisma Cloud 3.2.317",
"Checkov by Prisma Cloud 3.2.318",
"Checkov by Prisma Cloud 3.2.319",
"Checkov by Prisma Cloud 3.2.320",
"Checkov by Prisma Cloud 3.2.321",
"Checkov by Prisma Cloud 3.2.322",
"Checkov by Prisma Cloud 3.2.323",
"Checkov by Prisma Cloud 3.2.324",
"Checkov by Prisma Cloud 3.2.325",
"Checkov by Prisma Cloud 3.2.326",
"Checkov by Prisma Cloud 3.2.327",
"Checkov by Prisma Cloud 3.2.328",
"Checkov by Prisma Cloud 3.2.329",
"Checkov by Prisma Cloud 3.2.330",
"Checkov by Prisma Cloud 3.2.331",
"Checkov by Prisma Cloud 3.2.332",
"Checkov by Prisma Cloud 3.2.333",
"Checkov by Prisma Cloud 3.2.334",
"Checkov by Prisma Cloud 3.2.335",
"Checkov by Prisma Cloud 3.2.336",
"Checkov by Prisma Cloud 3.2.337",
"Checkov by Prisma Cloud 3.2.338",
"Checkov by Prisma Cloud 3.2.339",
"Checkov by Prisma Cloud 3.2.340",
"Checkov by Prisma Cloud 3.2.341",
"Checkov by Prisma Cloud 3.2.342",
"Checkov by Prisma Cloud 3.2.343",
"Checkov by Prisma Cloud 3.2.344",
"Checkov by Prisma Cloud 3.2.345",
"Checkov by Prisma Cloud 3.2.346",
"Checkov by Prisma Cloud 3.2.347",
"Checkov by Prisma Cloud 3.2.348",
"Checkov by Prisma Cloud 3.2.349",
"Checkov by Prisma Cloud 3.2.350",
"Checkov by Prisma Cloud 3.2.351",
"Checkov by Prisma Cloud 3.2.352",
"Checkov by Prisma Cloud 3.2.353",
"Checkov by Prisma Cloud 3.2.354",
"Checkov by Prisma Cloud 3.2.355",
"Checkov by Prisma Cloud 3.2.356",
"Checkov by Prisma Cloud 3.2.357",
"Checkov by Prisma Cloud 3.2.358",
"Checkov by Prisma Cloud 3.2.359",
"Checkov by Prisma Cloud 3.2.360",
"Checkov by Prisma Cloud 3.2.361",
"Checkov by Prisma Cloud 3.2.362",
"Checkov by Prisma Cloud 3.2.363",
"Checkov by Prisma Cloud 3.2.364",
"Checkov by Prisma Cloud 3.2.365",
"Checkov by Prisma Cloud 3.2.366",
"Checkov by Prisma Cloud 3.2.367",
"Checkov by Prisma Cloud 3.2.368",
"Checkov by Prisma Cloud 3.2.369",
"Checkov by Prisma Cloud 3.2.370",
"Checkov by Prisma Cloud 3.2.371",
"Checkov by Prisma Cloud 3.2.372",
"Checkov by Prisma Cloud 3.2.373",
"Checkov by Prisma Cloud 3.2.374",
"Checkov by Prisma Cloud 3.2.375",
"Checkov by Prisma Cloud 3.2.376",
"Checkov by Prisma Cloud 3.2.377",
"Checkov by Prisma Cloud 3.2.378",
"Checkov by Prisma Cloud 3.2.379",
"Checkov by Prisma Cloud 3.2.380",
"Checkov by Prisma Cloud 3.2.381",
"Checkov by Prisma Cloud 3.2.382",
"Checkov by Prisma Cloud 3.2.383",
"Checkov by Prisma Cloud 3.2.384",
"Checkov by Prisma Cloud 3.2.385",
"Checkov by Prisma Cloud 3.2.386",
"Checkov by Prisma Cloud 3.2.387",
"Checkov by Prisma Cloud 3.2.388",
"Checkov by Prisma Cloud 3.2.389",
"Checkov by Prisma Cloud 3.2.390",
"Checkov by Prisma Cloud 3.2.391",
"Checkov by Prisma Cloud 3.2.392",
"Checkov by Prisma Cloud 3.2.393",
"Checkov by Prisma Cloud 3.2.394",
"Checkov by Prisma Cloud 3.2.395",
"Checkov by Prisma Cloud 3.2.396",
"Checkov by Prisma Cloud 3.2.397",
"Checkov by Prisma Cloud 3.2.398",
"Checkov by Prisma Cloud 3.2.399",
"Checkov by Prisma Cloud 3.2.400",
"Checkov by Prisma Cloud 3.2.401",
"Checkov by Prisma Cloud 3.2.402",
"Checkov by Prisma Cloud 3.2.403",
"Checkov by Prisma Cloud 3.2.404",
"Checkov by Prisma Cloud 3.2.405",
"Checkov by Prisma Cloud 3.2.406",
"Checkov by Prisma Cloud 3.2.407",
"Checkov by Prisma Cloud 3.2.408",
"Checkov by Prisma Cloud 3.2.409",
"Checkov by Prisma Cloud 3.2.410",
"Checkov by Prisma Cloud 3.2.411",
"Checkov by Prisma Cloud 3.2.412",
"Checkov by Prisma Cloud 3.2.413",
"Checkov by Prisma Cloud 3.2.414",
"Checkov by Prisma Cloud 3.2.415",
"Checkov by Prisma Cloud 3.2.416",
"Checkov by Prisma Cloud 3.2.417",
"Checkov by Prisma Cloud 3.2.418",
"Checkov by Prisma Cloud 3.2.419",
"Checkov by Prisma Cloud 3.2.420",
"Checkov by Prisma Cloud 3.2.421",
"Checkov by Prisma Cloud 3.2.422",
"Checkov by Prisma Cloud 3.2.423",
"Checkov by Prisma Cloud 3.2.424",
"Checkov by Prisma Cloud 3.2.425",
"Checkov by Prisma Cloud 3.2.426",
"Checkov by Prisma Cloud 3.2.427",
"Checkov by Prisma Cloud 3.2.428",
"Checkov by Prisma Cloud 3.2.429",
"Checkov by Prisma Cloud 3.2.430",
"Checkov by Prisma Cloud 3.2.431",
"Checkov by Prisma Cloud 3.2.432",
"Checkov by Prisma Cloud 3.2.433",
"Checkov by Prisma Cloud 3.2.434",
"Checkov by Prisma Cloud 3.2.435",
"Checkov by Prisma Cloud 3.2.436",
"Checkov by Prisma Cloud 3.2.437",
"Checkov by Prisma Cloud 3.2.438",
"Checkov by Prisma Cloud 3.2.439",
"Checkov by Prisma Cloud 3.2.440",
"Checkov by Prisma Cloud 3.2.441",
"Checkov by Prisma Cloud 3.2.442",
"Checkov by Prisma Cloud 3.2.443",
"Checkov by Prisma Cloud 3.2.444",
"Checkov by Prisma Cloud 3.2.445",
"Checkov by Prisma Cloud 3.2.446",
"Checkov by Prisma Cloud 3.2.447",
"Checkov by Prisma Cloud 3.2.448",
"Checkov by Prisma Cloud 3.2.449",
"Checkov by Prisma Cloud 3.2.450",
"Checkov by Prisma Cloud 3.2.451",
"Checkov by Prisma Cloud 3.2.452",
"Checkov by Prisma Cloud 3.2.453",
"Checkov by Prisma Cloud 3.2.454",
"Checkov by Prisma Cloud 3.2.455",
"Checkov by Prisma Cloud 3.2.456",
"Checkov by Prisma Cloud 3.2.457",
"Checkov by Prisma Cloud 3.2.458",
"Checkov by Prisma Cloud 3.2.459",
"Checkov by Prisma Cloud 3.2.460",
"Checkov by Prisma Cloud 3.2.461",
"Checkov by Prisma Cloud 3.2.462",
"Checkov by Prisma Cloud 3.2.463",
"Checkov by Prisma Cloud 3.2.464",
"Checkov by Prisma Cloud 3.2.465",
"Checkov by Prisma Cloud 3.2.466",
"Checkov by Prisma Cloud 3.2.467",
"Checkov by Prisma Cloud 3.2.468",
"Checkov by Prisma Cloud 3.2.469",
"Checkov by Prisma Cloud 3.2.470",
"Checkov by Prisma Cloud 3.2.471",
"Checkov by Prisma Cloud 3.2.472",
"Checkov by Prisma Cloud 3.2.473",
"Checkov by Prisma Cloud 3.2.474",
"Checkov by Prisma Cloud 3.2.475",
"Checkov by Prisma Cloud 3.2.476",
"Checkov by Prisma Cloud 3.2.477",
"Checkov by Prisma Cloud 3.2.478",
"Checkov by Prisma Cloud 3.2.479",
"Checkov by Prisma Cloud 3.2.480",
"Checkov by Prisma Cloud 3.2.481",
"Checkov by Prisma Cloud 3.2.482",
"Checkov by Prisma Cloud 3.2.483",
"Checkov by Prisma Cloud 3.2.484",
"Checkov by Prisma Cloud 3.2.485",
"Checkov by Prisma Cloud 3.2.486",
"Checkov by Prisma Cloud 3.2.487",
"Checkov by Prisma Cloud 3.2.488",
"Checkov by Prisma Cloud 3.2.489",
"Checkov by Prisma Cloud 3.2.490",
"Checkov by Prisma Cloud 3.2.491",
"Checkov by Prisma Cloud 3.2.492",
"Checkov by Prisma Cloud 3.2.493",
"Checkov by Prisma Cloud 3.2.494",
"Checkov by Prisma Cloud 3.2.495",
"Checkov by Prisma Cloud 3.2.496",
"Checkov by Prisma Cloud 3.2.497",
"Checkov by Prisma Cloud 3.2.498",
"Checkov by Prisma Cloud 3.2.499",
"Checkov by Prisma Cloud 3.2.500",
"Checkov by Prisma Cloud 3.2.501",
"Checkov by Prisma Cloud 3.2.502",
"Checkov by Prisma Cloud 3.2.503",
"Checkov by Prisma Cloud 3.2.504",
"Checkov by Prisma Cloud 3.2.505",
"Checkov by Prisma Cloud 3.2.506",
"Checkov by Prisma Cloud 3.2.507",
"Checkov by Prisma Cloud 3.2.508",
"Checkov by Prisma Cloud 3.2.509",
"Checkov by Prisma Cloud 3.2.510",
"Checkov by Prisma Cloud 3.2.511",
"Checkov by Prisma Cloud 3.2.512",
"Checkov by Prisma Cloud 3.2.513",
"Checkov by Prisma Cloud 3.2.514",
"Checkov by Prisma Cloud 3.2.515",
"Checkov by Prisma Cloud 3.2.516",
"Checkov by Prisma Cloud 3.2.517",
"Checkov by Prisma Cloud 3.2.518",
"Checkov by Prisma Cloud 3.2.519",
"Checkov by Prisma Cloud 3.2.520",
"Checkov by Prisma Cloud 3.2.521",
"Checkov by Prisma Cloud 3.2.522",
"Checkov by Prisma Cloud 3.2.523",
"Checkov by Prisma Cloud 3.2.524",
"Checkov by Prisma Cloud 3.2.525",
"Checkov by Prisma Cloud 3.2.526",
"Checkov by Prisma Cloud 3.2.527",
"Checkov by Prisma Cloud 3.2.528",
"Checkov by Prisma Cloud 3.2.529",
"Checkov by Prisma Cloud 3.2.530",
"Checkov by Prisma Cloud 3.2.531"
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2026-0303",
"datePublished": "2026-09-10T06:03:50.513Z",
"dateReserved": "2025-11-03T20:45:01.388Z",
"dateUpdated": "2026-09-10T13:01:27.361Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-2181 (GCVE-0-2025-2181)
Vulnerability from cvelistv5
Published
2025-08-13 17:03
Modified
2025-08-13 20:31
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-312 - Cleartext Storage of Sensitive Information
Summary
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Version: 3.2.0 < 3.2.449 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-2181",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-13T20:31:31.868823Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T20:31:43.129Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.449",
"status": "unaffected"
}
],
"lessThan": "3.2.449",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No special configuration is required to be affected by this issue."
}
],
"value": "No special configuration is required to be affected by this issue."
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Shashank Chaurasia"
}
],
"datePublic": "2025-08-13T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can result in the cleartext exposure of\u0026nbsp;Prisma Cloud access keys in Checkov\u0027s output.\u003c/p\u003e"
}
],
"value": "A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can result in the cleartext exposure of\u00a0Prisma Cloud access keys in Checkov\u0027s output."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-37",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-37 Retrieve Embedded Sensitive Data"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "ACTIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Attacker finds a Prisma Cloud access key in a Checkov output file that a user uploaded to an insecure location."
}
]
},
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Attacker gains access to a system and then finds a Checkov output file that contains an exposed Prisma Cloud access key."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "CWE-312 Cleartext Storage of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:03:03.787Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2025-2181"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.448\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.449 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available. All Prisma Cloud access keys used by Checkov should be rotated after upgrading to a fixed version (this step is recommended for all modes of using Checkov)."
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.448\n Upgrade to 3.2.449 or later.\n \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available. All Prisma Cloud access keys used by Checkov should be rotated after upgrading to a fixed version (this step is recommended for all modes of using Checkov)."
}
],
"source": {
"defect": [
"BCE-42897"
],
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2025-08-13T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: Cleartext Exposure of Credentials",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No known workarounds exist for this issue."
}
],
"value": "No known workarounds exist for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2025-2181",
"datePublished": "2025-08-13T17:03:03.787Z",
"dateReserved": "2025-03-10T17:56:23.828Z",
"dateUpdated": "2025-08-13T20:31:43.129Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-2180 (GCVE-0-2025-2180)
Vulnerability from cvelistv5
Published
2025-08-13 17:02
Modified
2025-08-13 17:21
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-502 - Deserialization of Untrusted Data
Summary
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud.
This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.
References
| URL | Tags | ||||
|---|---|---|---|---|---|
|
|||||
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Version: 3.2.0 < 3.2.415 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-2180",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-13T17:20:30.282985Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:21:30.216Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.415",
"status": "unaffected"
}
],
"lessThan": "3.2.415",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
}
],
"value": "No special configuration is required to be vulnerable to this issue."
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Palo Alto Networks thanks Bryan Eastes for discovering and reporting this issue."
}
],
"datePublic": "2025-08-13T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma\u00ae Cloud.\u003cbr\u003e\u003cbr\u003eThis issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415."
}
],
"value": "An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma\u00ae Cloud.\n\nThis issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:02:47.899Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2025-2180"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.414\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.415 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.414\n Upgrade to 3.2.415 or later."
}
],
"source": {
"defect": [
"BCE-44235"
],
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2025-08-13T16:00:00.000Z",
"value": "Initial publication"
}
],
"title": "Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Do not run Checkov on terraform files from untrusted sources or pull requests."
}
],
"value": "Do not run Checkov on terraform files from untrusted sources or pull requests."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2025-2180",
"datePublished": "2025-08-13T17:02:47.899Z",
"dateReserved": "2025-03-10T17:56:22.502Z",
"dateUpdated": "2025-08-13T17:21:30.216Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}