Search
Find a vulnerability
Search criteria
10 vulnerabilities found for Checkov by Prisma Cloud by Palo Alto Networks
CVE-2026-0303 (GCVE-0-2026-0303)
Vulnerability from nvd – Published: 2026-09-10 06:03 – Updated: 2026-09-10 13:01
VLAI
EPSS
VEX
Title
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
Summary
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 13:01 UTC
CWE
- CWE-829 - Inclusion of Functionality from Untrusted Control Sphere
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0303 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Affected:
3.2.0 , < 3.2.532
(custom)
cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:* |
Date Public
2026-09-09 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0303",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T13:01:15.631812Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T13:01:27.361Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.532",
"status": "unaffected"
}
],
"lessThan": "3.2.532",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
}
],
"value": "No special configuration is required to be vulnerable to this issue."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.532",
"versionStartIncluding": "3.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Michael Adedeji"
}
],
"datePublic": "2026-09-09T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 2.4,
"baseSeverity": "LOW",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-829",
"description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T06:03:50.513Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2026-0303"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.531\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.532or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.531\n Upgrade to 3.2.532or later.\n \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-09-09T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"x_affectedList": [
"Checkov by Prisma Cloud 3.2.0",
"Checkov by Prisma Cloud 3.2.1",
"Checkov by Prisma Cloud 3.2.2",
"Checkov by Prisma Cloud 3.2.3",
"Checkov by Prisma Cloud 3.2.4",
"Checkov by Prisma Cloud 3.2.5",
"Checkov by Prisma Cloud 3.2.6",
"Checkov by Prisma Cloud 3.2.7",
"Checkov by Prisma Cloud 3.2.8",
"Checkov by Prisma Cloud 3.2.9",
"Checkov by Prisma Cloud 3.2.10",
"Checkov by Prisma Cloud 3.2.11",
"Checkov by Prisma Cloud 3.2.12",
"Checkov by Prisma Cloud 3.2.13",
"Checkov by Prisma Cloud 3.2.14",
"Checkov by Prisma Cloud 3.2.15",
"Checkov by Prisma Cloud 3.2.16",
"Checkov by Prisma Cloud 3.2.17",
"Checkov by Prisma Cloud 3.2.18",
"Checkov by Prisma Cloud 3.2.19",
"Checkov by Prisma Cloud 3.2.20",
"Checkov by Prisma Cloud 3.2.21",
"Checkov by Prisma Cloud 3.2.22",
"Checkov by Prisma Cloud 3.2.23",
"Checkov by Prisma Cloud 3.2.24",
"Checkov by Prisma Cloud 3.2.25",
"Checkov by Prisma Cloud 3.2.26",
"Checkov by Prisma Cloud 3.2.27",
"Checkov by Prisma Cloud 3.2.28",
"Checkov by Prisma Cloud 3.2.29",
"Checkov by Prisma Cloud 3.2.30",
"Checkov by Prisma Cloud 3.2.31",
"Checkov by Prisma Cloud 3.2.32",
"Checkov by Prisma Cloud 3.2.33",
"Checkov by Prisma Cloud 3.2.34",
"Checkov by Prisma Cloud 3.2.35",
"Checkov by Prisma Cloud 3.2.36",
"Checkov by Prisma Cloud 3.2.37",
"Checkov by Prisma Cloud 3.2.38",
"Checkov by Prisma Cloud 3.2.39",
"Checkov by Prisma Cloud 3.2.40",
"Checkov by Prisma Cloud 3.2.41",
"Checkov by Prisma Cloud 3.2.42",
"Checkov by Prisma Cloud 3.2.43",
"Checkov by Prisma Cloud 3.2.44",
"Checkov by Prisma Cloud 3.2.45",
"Checkov by Prisma Cloud 3.2.46",
"Checkov by Prisma Cloud 3.2.47",
"Checkov by Prisma Cloud 3.2.48",
"Checkov by Prisma Cloud 3.2.49",
"Checkov by Prisma Cloud 3.2.50",
"Checkov by Prisma Cloud 3.2.51",
"Checkov by Prisma Cloud 3.2.52",
"Checkov by Prisma Cloud 3.2.53",
"Checkov by Prisma Cloud 3.2.54",
"Checkov by Prisma Cloud 3.2.55",
"Checkov by Prisma Cloud 3.2.56",
"Checkov by Prisma Cloud 3.2.57",
"Checkov by Prisma Cloud 3.2.58",
"Checkov by Prisma Cloud 3.2.59",
"Checkov by Prisma Cloud 3.2.60",
"Checkov by Prisma Cloud 3.2.61",
"Checkov by Prisma Cloud 3.2.62",
"Checkov by Prisma Cloud 3.2.63",
"Checkov by Prisma Cloud 3.2.64",
"Checkov by Prisma Cloud 3.2.65",
"Checkov by Prisma Cloud 3.2.66",
"Checkov by Prisma Cloud 3.2.67",
"Checkov by Prisma Cloud 3.2.68",
"Checkov by Prisma Cloud 3.2.69",
"Checkov by Prisma Cloud 3.2.70",
"Checkov by Prisma Cloud 3.2.71",
"Checkov by Prisma Cloud 3.2.72",
"Checkov by Prisma Cloud 3.2.73",
"Checkov by Prisma Cloud 3.2.74",
"Checkov by Prisma Cloud 3.2.75",
"Checkov by Prisma Cloud 3.2.76",
"Checkov by Prisma Cloud 3.2.77",
"Checkov by Prisma Cloud 3.2.78",
"Checkov by Prisma Cloud 3.2.79",
"Checkov by Prisma Cloud 3.2.80",
"Checkov by Prisma Cloud 3.2.81",
"Checkov by Prisma Cloud 3.2.82",
"Checkov by Prisma Cloud 3.2.83",
"Checkov by Prisma Cloud 3.2.84",
"Checkov by Prisma Cloud 3.2.85",
"Checkov by Prisma Cloud 3.2.86",
"Checkov by Prisma Cloud 3.2.87",
"Checkov by Prisma Cloud 3.2.88",
"Checkov by Prisma Cloud 3.2.89",
"Checkov by Prisma Cloud 3.2.90",
"Checkov by Prisma Cloud 3.2.91",
"Checkov by Prisma Cloud 3.2.92",
"Checkov by Prisma Cloud 3.2.93",
"Checkov by Prisma Cloud 3.2.94",
"Checkov by Prisma Cloud 3.2.95",
"Checkov by Prisma Cloud 3.2.96",
"Checkov by Prisma Cloud 3.2.97",
"Checkov by Prisma Cloud 3.2.98",
"Checkov by Prisma Cloud 3.2.99",
"Checkov by Prisma Cloud 3.2.100",
"Checkov by Prisma Cloud 3.2.101",
"Checkov by Prisma Cloud 3.2.102",
"Checkov by Prisma Cloud 3.2.103",
"Checkov by Prisma Cloud 3.2.104",
"Checkov by Prisma Cloud 3.2.105",
"Checkov by Prisma Cloud 3.2.106",
"Checkov by Prisma Cloud 3.2.107",
"Checkov by Prisma Cloud 3.2.108",
"Checkov by Prisma Cloud 3.2.109",
"Checkov by Prisma Cloud 3.2.110",
"Checkov by Prisma Cloud 3.2.111",
"Checkov by Prisma Cloud 3.2.112",
"Checkov by Prisma Cloud 3.2.113",
"Checkov by Prisma Cloud 3.2.114",
"Checkov by Prisma Cloud 3.2.115",
"Checkov by Prisma Cloud 3.2.116",
"Checkov by Prisma Cloud 3.2.117",
"Checkov by Prisma Cloud 3.2.118",
"Checkov by Prisma Cloud 3.2.119",
"Checkov by Prisma Cloud 3.2.120",
"Checkov by Prisma Cloud 3.2.121",
"Checkov by Prisma Cloud 3.2.122",
"Checkov by Prisma Cloud 3.2.123",
"Checkov by Prisma Cloud 3.2.124",
"Checkov by Prisma Cloud 3.2.125",
"Checkov by Prisma Cloud 3.2.126",
"Checkov by Prisma Cloud 3.2.127",
"Checkov by Prisma Cloud 3.2.128",
"Checkov by Prisma Cloud 3.2.129",
"Checkov by Prisma Cloud 3.2.130",
"Checkov by Prisma Cloud 3.2.131",
"Checkov by Prisma Cloud 3.2.132",
"Checkov by Prisma Cloud 3.2.133",
"Checkov by Prisma Cloud 3.2.134",
"Checkov by Prisma Cloud 3.2.135",
"Checkov by Prisma Cloud 3.2.136",
"Checkov by Prisma Cloud 3.2.137",
"Checkov by Prisma Cloud 3.2.138",
"Checkov by Prisma Cloud 3.2.139",
"Checkov by Prisma Cloud 3.2.140",
"Checkov by Prisma Cloud 3.2.141",
"Checkov by Prisma Cloud 3.2.142",
"Checkov by Prisma Cloud 3.2.143",
"Checkov by Prisma Cloud 3.2.144",
"Checkov by Prisma Cloud 3.2.145",
"Checkov by Prisma Cloud 3.2.146",
"Checkov by Prisma Cloud 3.2.147",
"Checkov by Prisma Cloud 3.2.148",
"Checkov by Prisma Cloud 3.2.149",
"Checkov by Prisma Cloud 3.2.150",
"Checkov by Prisma Cloud 3.2.151",
"Checkov by Prisma Cloud 3.2.152",
"Checkov by Prisma Cloud 3.2.153",
"Checkov by Prisma Cloud 3.2.154",
"Checkov by Prisma Cloud 3.2.155",
"Checkov by Prisma Cloud 3.2.156",
"Checkov by Prisma Cloud 3.2.157",
"Checkov by Prisma Cloud 3.2.158",
"Checkov by Prisma Cloud 3.2.159",
"Checkov by Prisma Cloud 3.2.160",
"Checkov by Prisma Cloud 3.2.161",
"Checkov by Prisma Cloud 3.2.162",
"Checkov by Prisma Cloud 3.2.163",
"Checkov by Prisma Cloud 3.2.164",
"Checkov by Prisma Cloud 3.2.165",
"Checkov by Prisma Cloud 3.2.166",
"Checkov by Prisma Cloud 3.2.167",
"Checkov by Prisma Cloud 3.2.168",
"Checkov by Prisma Cloud 3.2.169",
"Checkov by Prisma Cloud 3.2.170",
"Checkov by Prisma Cloud 3.2.171",
"Checkov by Prisma Cloud 3.2.172",
"Checkov by Prisma Cloud 3.2.173",
"Checkov by Prisma Cloud 3.2.174",
"Checkov by Prisma Cloud 3.2.175",
"Checkov by Prisma Cloud 3.2.176",
"Checkov by Prisma Cloud 3.2.177",
"Checkov by Prisma Cloud 3.2.178",
"Checkov by Prisma Cloud 3.2.179",
"Checkov by Prisma Cloud 3.2.180",
"Checkov by Prisma Cloud 3.2.181",
"Checkov by Prisma Cloud 3.2.182",
"Checkov by Prisma Cloud 3.2.183",
"Checkov by Prisma Cloud 3.2.184",
"Checkov by Prisma Cloud 3.2.185",
"Checkov by Prisma Cloud 3.2.186",
"Checkov by Prisma Cloud 3.2.187",
"Checkov by Prisma Cloud 3.2.188",
"Checkov by Prisma Cloud 3.2.189",
"Checkov by Prisma Cloud 3.2.190",
"Checkov by Prisma Cloud 3.2.191",
"Checkov by Prisma Cloud 3.2.192",
"Checkov by Prisma Cloud 3.2.193",
"Checkov by Prisma Cloud 3.2.194",
"Checkov by Prisma Cloud 3.2.195",
"Checkov by Prisma Cloud 3.2.196",
"Checkov by Prisma Cloud 3.2.197",
"Checkov by Prisma Cloud 3.2.198",
"Checkov by Prisma Cloud 3.2.199",
"Checkov by Prisma Cloud 3.2.200",
"Checkov by Prisma Cloud 3.2.201",
"Checkov by Prisma Cloud 3.2.202",
"Checkov by Prisma Cloud 3.2.203",
"Checkov by Prisma Cloud 3.2.204",
"Checkov by Prisma Cloud 3.2.205",
"Checkov by Prisma Cloud 3.2.206",
"Checkov by Prisma Cloud 3.2.207",
"Checkov by Prisma Cloud 3.2.208",
"Checkov by Prisma Cloud 3.2.209",
"Checkov by Prisma Cloud 3.2.210",
"Checkov by Prisma Cloud 3.2.211",
"Checkov by Prisma Cloud 3.2.212",
"Checkov by Prisma Cloud 3.2.213",
"Checkov by Prisma Cloud 3.2.214",
"Checkov by Prisma Cloud 3.2.215",
"Checkov by Prisma Cloud 3.2.216",
"Checkov by Prisma Cloud 3.2.217",
"Checkov by Prisma Cloud 3.2.218",
"Checkov by Prisma Cloud 3.2.219",
"Checkov by Prisma Cloud 3.2.220",
"Checkov by Prisma Cloud 3.2.221",
"Checkov by Prisma Cloud 3.2.222",
"Checkov by Prisma Cloud 3.2.223",
"Checkov by Prisma Cloud 3.2.224",
"Checkov by Prisma Cloud 3.2.225",
"Checkov by Prisma Cloud 3.2.226",
"Checkov by Prisma Cloud 3.2.227",
"Checkov by Prisma Cloud 3.2.228",
"Checkov by Prisma Cloud 3.2.229",
"Checkov by Prisma Cloud 3.2.230",
"Checkov by Prisma Cloud 3.2.231",
"Checkov by Prisma Cloud 3.2.232",
"Checkov by Prisma Cloud 3.2.233",
"Checkov by Prisma Cloud 3.2.234",
"Checkov by Prisma Cloud 3.2.235",
"Checkov by Prisma Cloud 3.2.236",
"Checkov by Prisma Cloud 3.2.237",
"Checkov by Prisma Cloud 3.2.238",
"Checkov by Prisma Cloud 3.2.239",
"Checkov by Prisma Cloud 3.2.240",
"Checkov by Prisma Cloud 3.2.241",
"Checkov by Prisma Cloud 3.2.242",
"Checkov by Prisma Cloud 3.2.243",
"Checkov by Prisma Cloud 3.2.244",
"Checkov by Prisma Cloud 3.2.245",
"Checkov by Prisma Cloud 3.2.246",
"Checkov by Prisma Cloud 3.2.247",
"Checkov by Prisma Cloud 3.2.248",
"Checkov by Prisma Cloud 3.2.249",
"Checkov by Prisma Cloud 3.2.250",
"Checkov by Prisma Cloud 3.2.251",
"Checkov by Prisma Cloud 3.2.252",
"Checkov by Prisma Cloud 3.2.253",
"Checkov by Prisma Cloud 3.2.254",
"Checkov by Prisma Cloud 3.2.255",
"Checkov by Prisma Cloud 3.2.256",
"Checkov by Prisma Cloud 3.2.257",
"Checkov by Prisma Cloud 3.2.258",
"Checkov by Prisma Cloud 3.2.259",
"Checkov by Prisma Cloud 3.2.260",
"Checkov by Prisma Cloud 3.2.261",
"Checkov by Prisma Cloud 3.2.262",
"Checkov by Prisma Cloud 3.2.263",
"Checkov by Prisma Cloud 3.2.264",
"Checkov by Prisma Cloud 3.2.265",
"Checkov by Prisma Cloud 3.2.266",
"Checkov by Prisma Cloud 3.2.267",
"Checkov by Prisma Cloud 3.2.268",
"Checkov by Prisma Cloud 3.2.269",
"Checkov by Prisma Cloud 3.2.270",
"Checkov by Prisma Cloud 3.2.271",
"Checkov by Prisma Cloud 3.2.272",
"Checkov by Prisma Cloud 3.2.273",
"Checkov by Prisma Cloud 3.2.274",
"Checkov by Prisma Cloud 3.2.275",
"Checkov by Prisma Cloud 3.2.276",
"Checkov by Prisma Cloud 3.2.277",
"Checkov by Prisma Cloud 3.2.278",
"Checkov by Prisma Cloud 3.2.279",
"Checkov by Prisma Cloud 3.2.280",
"Checkov by Prisma Cloud 3.2.281",
"Checkov by Prisma Cloud 3.2.282",
"Checkov by Prisma Cloud 3.2.283",
"Checkov by Prisma Cloud 3.2.284",
"Checkov by Prisma Cloud 3.2.285",
"Checkov by Prisma Cloud 3.2.286",
"Checkov by Prisma Cloud 3.2.287",
"Checkov by Prisma Cloud 3.2.288",
"Checkov by Prisma Cloud 3.2.289",
"Checkov by Prisma Cloud 3.2.290",
"Checkov by Prisma Cloud 3.2.291",
"Checkov by Prisma Cloud 3.2.292",
"Checkov by Prisma Cloud 3.2.293",
"Checkov by Prisma Cloud 3.2.294",
"Checkov by Prisma Cloud 3.2.295",
"Checkov by Prisma Cloud 3.2.296",
"Checkov by Prisma Cloud 3.2.297",
"Checkov by Prisma Cloud 3.2.298",
"Checkov by Prisma Cloud 3.2.299",
"Checkov by Prisma Cloud 3.2.300",
"Checkov by Prisma Cloud 3.2.301",
"Checkov by Prisma Cloud 3.2.302",
"Checkov by Prisma Cloud 3.2.303",
"Checkov by Prisma Cloud 3.2.304",
"Checkov by Prisma Cloud 3.2.305",
"Checkov by Prisma Cloud 3.2.306",
"Checkov by Prisma Cloud 3.2.307",
"Checkov by Prisma Cloud 3.2.308",
"Checkov by Prisma Cloud 3.2.309",
"Checkov by Prisma Cloud 3.2.310",
"Checkov by Prisma Cloud 3.2.311",
"Checkov by Prisma Cloud 3.2.312",
"Checkov by Prisma Cloud 3.2.313",
"Checkov by Prisma Cloud 3.2.314",
"Checkov by Prisma Cloud 3.2.315",
"Checkov by Prisma Cloud 3.2.316",
"Checkov by Prisma Cloud 3.2.317",
"Checkov by Prisma Cloud 3.2.318",
"Checkov by Prisma Cloud 3.2.319",
"Checkov by Prisma Cloud 3.2.320",
"Checkov by Prisma Cloud 3.2.321",
"Checkov by Prisma Cloud 3.2.322",
"Checkov by Prisma Cloud 3.2.323",
"Checkov by Prisma Cloud 3.2.324",
"Checkov by Prisma Cloud 3.2.325",
"Checkov by Prisma Cloud 3.2.326",
"Checkov by Prisma Cloud 3.2.327",
"Checkov by Prisma Cloud 3.2.328",
"Checkov by Prisma Cloud 3.2.329",
"Checkov by Prisma Cloud 3.2.330",
"Checkov by Prisma Cloud 3.2.331",
"Checkov by Prisma Cloud 3.2.332",
"Checkov by Prisma Cloud 3.2.333",
"Checkov by Prisma Cloud 3.2.334",
"Checkov by Prisma Cloud 3.2.335",
"Checkov by Prisma Cloud 3.2.336",
"Checkov by Prisma Cloud 3.2.337",
"Checkov by Prisma Cloud 3.2.338",
"Checkov by Prisma Cloud 3.2.339",
"Checkov by Prisma Cloud 3.2.340",
"Checkov by Prisma Cloud 3.2.341",
"Checkov by Prisma Cloud 3.2.342",
"Checkov by Prisma Cloud 3.2.343",
"Checkov by Prisma Cloud 3.2.344",
"Checkov by Prisma Cloud 3.2.345",
"Checkov by Prisma Cloud 3.2.346",
"Checkov by Prisma Cloud 3.2.347",
"Checkov by Prisma Cloud 3.2.348",
"Checkov by Prisma Cloud 3.2.349",
"Checkov by Prisma Cloud 3.2.350",
"Checkov by Prisma Cloud 3.2.351",
"Checkov by Prisma Cloud 3.2.352",
"Checkov by Prisma Cloud 3.2.353",
"Checkov by Prisma Cloud 3.2.354",
"Checkov by Prisma Cloud 3.2.355",
"Checkov by Prisma Cloud 3.2.356",
"Checkov by Prisma Cloud 3.2.357",
"Checkov by Prisma Cloud 3.2.358",
"Checkov by Prisma Cloud 3.2.359",
"Checkov by Prisma Cloud 3.2.360",
"Checkov by Prisma Cloud 3.2.361",
"Checkov by Prisma Cloud 3.2.362",
"Checkov by Prisma Cloud 3.2.363",
"Checkov by Prisma Cloud 3.2.364",
"Checkov by Prisma Cloud 3.2.365",
"Checkov by Prisma Cloud 3.2.366",
"Checkov by Prisma Cloud 3.2.367",
"Checkov by Prisma Cloud 3.2.368",
"Checkov by Prisma Cloud 3.2.369",
"Checkov by Prisma Cloud 3.2.370",
"Checkov by Prisma Cloud 3.2.371",
"Checkov by Prisma Cloud 3.2.372",
"Checkov by Prisma Cloud 3.2.373",
"Checkov by Prisma Cloud 3.2.374",
"Checkov by Prisma Cloud 3.2.375",
"Checkov by Prisma Cloud 3.2.376",
"Checkov by Prisma Cloud 3.2.377",
"Checkov by Prisma Cloud 3.2.378",
"Checkov by Prisma Cloud 3.2.379",
"Checkov by Prisma Cloud 3.2.380",
"Checkov by Prisma Cloud 3.2.381",
"Checkov by Prisma Cloud 3.2.382",
"Checkov by Prisma Cloud 3.2.383",
"Checkov by Prisma Cloud 3.2.384",
"Checkov by Prisma Cloud 3.2.385",
"Checkov by Prisma Cloud 3.2.386",
"Checkov by Prisma Cloud 3.2.387",
"Checkov by Prisma Cloud 3.2.388",
"Checkov by Prisma Cloud 3.2.389",
"Checkov by Prisma Cloud 3.2.390",
"Checkov by Prisma Cloud 3.2.391",
"Checkov by Prisma Cloud 3.2.392",
"Checkov by Prisma Cloud 3.2.393",
"Checkov by Prisma Cloud 3.2.394",
"Checkov by Prisma Cloud 3.2.395",
"Checkov by Prisma Cloud 3.2.396",
"Checkov by Prisma Cloud 3.2.397",
"Checkov by Prisma Cloud 3.2.398",
"Checkov by Prisma Cloud 3.2.399",
"Checkov by Prisma Cloud 3.2.400",
"Checkov by Prisma Cloud 3.2.401",
"Checkov by Prisma Cloud 3.2.402",
"Checkov by Prisma Cloud 3.2.403",
"Checkov by Prisma Cloud 3.2.404",
"Checkov by Prisma Cloud 3.2.405",
"Checkov by Prisma Cloud 3.2.406",
"Checkov by Prisma Cloud 3.2.407",
"Checkov by Prisma Cloud 3.2.408",
"Checkov by Prisma Cloud 3.2.409",
"Checkov by Prisma Cloud 3.2.410",
"Checkov by Prisma Cloud 3.2.411",
"Checkov by Prisma Cloud 3.2.412",
"Checkov by Prisma Cloud 3.2.413",
"Checkov by Prisma Cloud 3.2.414",
"Checkov by Prisma Cloud 3.2.415",
"Checkov by Prisma Cloud 3.2.416",
"Checkov by Prisma Cloud 3.2.417",
"Checkov by Prisma Cloud 3.2.418",
"Checkov by Prisma Cloud 3.2.419",
"Checkov by Prisma Cloud 3.2.420",
"Checkov by Prisma Cloud 3.2.421",
"Checkov by Prisma Cloud 3.2.422",
"Checkov by Prisma Cloud 3.2.423",
"Checkov by Prisma Cloud 3.2.424",
"Checkov by Prisma Cloud 3.2.425",
"Checkov by Prisma Cloud 3.2.426",
"Checkov by Prisma Cloud 3.2.427",
"Checkov by Prisma Cloud 3.2.428",
"Checkov by Prisma Cloud 3.2.429",
"Checkov by Prisma Cloud 3.2.430",
"Checkov by Prisma Cloud 3.2.431",
"Checkov by Prisma Cloud 3.2.432",
"Checkov by Prisma Cloud 3.2.433",
"Checkov by Prisma Cloud 3.2.434",
"Checkov by Prisma Cloud 3.2.435",
"Checkov by Prisma Cloud 3.2.436",
"Checkov by Prisma Cloud 3.2.437",
"Checkov by Prisma Cloud 3.2.438",
"Checkov by Prisma Cloud 3.2.439",
"Checkov by Prisma Cloud 3.2.440",
"Checkov by Prisma Cloud 3.2.441",
"Checkov by Prisma Cloud 3.2.442",
"Checkov by Prisma Cloud 3.2.443",
"Checkov by Prisma Cloud 3.2.444",
"Checkov by Prisma Cloud 3.2.445",
"Checkov by Prisma Cloud 3.2.446",
"Checkov by Prisma Cloud 3.2.447",
"Checkov by Prisma Cloud 3.2.448",
"Checkov by Prisma Cloud 3.2.449",
"Checkov by Prisma Cloud 3.2.450",
"Checkov by Prisma Cloud 3.2.451",
"Checkov by Prisma Cloud 3.2.452",
"Checkov by Prisma Cloud 3.2.453",
"Checkov by Prisma Cloud 3.2.454",
"Checkov by Prisma Cloud 3.2.455",
"Checkov by Prisma Cloud 3.2.456",
"Checkov by Prisma Cloud 3.2.457",
"Checkov by Prisma Cloud 3.2.458",
"Checkov by Prisma Cloud 3.2.459",
"Checkov by Prisma Cloud 3.2.460",
"Checkov by Prisma Cloud 3.2.461",
"Checkov by Prisma Cloud 3.2.462",
"Checkov by Prisma Cloud 3.2.463",
"Checkov by Prisma Cloud 3.2.464",
"Checkov by Prisma Cloud 3.2.465",
"Checkov by Prisma Cloud 3.2.466",
"Checkov by Prisma Cloud 3.2.467",
"Checkov by Prisma Cloud 3.2.468",
"Checkov by Prisma Cloud 3.2.469",
"Checkov by Prisma Cloud 3.2.470",
"Checkov by Prisma Cloud 3.2.471",
"Checkov by Prisma Cloud 3.2.472",
"Checkov by Prisma Cloud 3.2.473",
"Checkov by Prisma Cloud 3.2.474",
"Checkov by Prisma Cloud 3.2.475",
"Checkov by Prisma Cloud 3.2.476",
"Checkov by Prisma Cloud 3.2.477",
"Checkov by Prisma Cloud 3.2.478",
"Checkov by Prisma Cloud 3.2.479",
"Checkov by Prisma Cloud 3.2.480",
"Checkov by Prisma Cloud 3.2.481",
"Checkov by Prisma Cloud 3.2.482",
"Checkov by Prisma Cloud 3.2.483",
"Checkov by Prisma Cloud 3.2.484",
"Checkov by Prisma Cloud 3.2.485",
"Checkov by Prisma Cloud 3.2.486",
"Checkov by Prisma Cloud 3.2.487",
"Checkov by Prisma Cloud 3.2.488",
"Checkov by Prisma Cloud 3.2.489",
"Checkov by Prisma Cloud 3.2.490",
"Checkov by Prisma Cloud 3.2.491",
"Checkov by Prisma Cloud 3.2.492",
"Checkov by Prisma Cloud 3.2.493",
"Checkov by Prisma Cloud 3.2.494",
"Checkov by Prisma Cloud 3.2.495",
"Checkov by Prisma Cloud 3.2.496",
"Checkov by Prisma Cloud 3.2.497",
"Checkov by Prisma Cloud 3.2.498",
"Checkov by Prisma Cloud 3.2.499",
"Checkov by Prisma Cloud 3.2.500",
"Checkov by Prisma Cloud 3.2.501",
"Checkov by Prisma Cloud 3.2.502",
"Checkov by Prisma Cloud 3.2.503",
"Checkov by Prisma Cloud 3.2.504",
"Checkov by Prisma Cloud 3.2.505",
"Checkov by Prisma Cloud 3.2.506",
"Checkov by Prisma Cloud 3.2.507",
"Checkov by Prisma Cloud 3.2.508",
"Checkov by Prisma Cloud 3.2.509",
"Checkov by Prisma Cloud 3.2.510",
"Checkov by Prisma Cloud 3.2.511",
"Checkov by Prisma Cloud 3.2.512",
"Checkov by Prisma Cloud 3.2.513",
"Checkov by Prisma Cloud 3.2.514",
"Checkov by Prisma Cloud 3.2.515",
"Checkov by Prisma Cloud 3.2.516",
"Checkov by Prisma Cloud 3.2.517",
"Checkov by Prisma Cloud 3.2.518",
"Checkov by Prisma Cloud 3.2.519",
"Checkov by Prisma Cloud 3.2.520",
"Checkov by Prisma Cloud 3.2.521",
"Checkov by Prisma Cloud 3.2.522",
"Checkov by Prisma Cloud 3.2.523",
"Checkov by Prisma Cloud 3.2.524",
"Checkov by Prisma Cloud 3.2.525",
"Checkov by Prisma Cloud 3.2.526",
"Checkov by Prisma Cloud 3.2.527",
"Checkov by Prisma Cloud 3.2.528",
"Checkov by Prisma Cloud 3.2.529",
"Checkov by Prisma Cloud 3.2.530",
"Checkov by Prisma Cloud 3.2.531"
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2026-0303",
"datePublished": "2026-09-10T06:03:50.513Z",
"dateReserved": "2025-11-03T20:45:01.388Z",
"dateUpdated": "2026-09-10T13:01:27.361Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0302 (GCVE-0-2026-0302)
Vulnerability from nvd – Published: 2026-09-10 06:05 – Updated: 2026-09-10 13:00
VLAI
EPSS
VEX
Title
Checkov by Prisma Cloud: OS Command Injection Vulnerability
Summary
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 13:00 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0302 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Affected:
3.2.0 , < 3.2.502
(custom)
cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:* |
Date Public
2026-09-09 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0302",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T13:00:38.190667Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T13:00:46.376Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.502",
"status": "unaffected"
}
],
"lessThan": "3.2.502",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No special configuration is required to be affected by this issue.\u0026nbsp;"
}
],
"value": "No special configuration is required to be affected by this issue."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.502",
"versionStartIncluding": "3.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Gherasim"
}
],
"datePublic": "2026-09-09T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov.\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88 OS Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 1.1,
"baseSeverity": "LOW",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "LOW",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user is able to influence input consumed by a Checkov scan."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T06:05:20.011Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2026-0302"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through\u0026nbsp;3.2.501\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.502 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through\u00a03.2.501\n Upgrade to 3.2.502 or later."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-09-09T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: OS Command Injection Vulnerability",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No known workarounds exist for this issue."
}
],
"value": "No known workarounds exist for this issue."
}
],
"x_affectedList": [
"Checkov by Prisma Cloud 3.2.0",
"Checkov by Prisma Cloud 3.2.1",
"Checkov by Prisma Cloud 3.2.2",
"Checkov by Prisma Cloud 3.2.3",
"Checkov by Prisma Cloud 3.2.4",
"Checkov by Prisma Cloud 3.2.5",
"Checkov by Prisma Cloud 3.2.6",
"Checkov by Prisma Cloud 3.2.7",
"Checkov by Prisma Cloud 3.2.8",
"Checkov by Prisma Cloud 3.2.9",
"Checkov by Prisma Cloud 3.2.10",
"Checkov by Prisma Cloud 3.2.11",
"Checkov by Prisma Cloud 3.2.12",
"Checkov by Prisma Cloud 3.2.13",
"Checkov by Prisma Cloud 3.2.14",
"Checkov by Prisma Cloud 3.2.15",
"Checkov by Prisma Cloud 3.2.16",
"Checkov by Prisma Cloud 3.2.17",
"Checkov by Prisma Cloud 3.2.18",
"Checkov by Prisma Cloud 3.2.19",
"Checkov by Prisma Cloud 3.2.20",
"Checkov by Prisma Cloud 3.2.21",
"Checkov by Prisma Cloud 3.2.22",
"Checkov by Prisma Cloud 3.2.23",
"Checkov by Prisma Cloud 3.2.24",
"Checkov by Prisma Cloud 3.2.25",
"Checkov by Prisma Cloud 3.2.26",
"Checkov by Prisma Cloud 3.2.27",
"Checkov by Prisma Cloud 3.2.28",
"Checkov by Prisma Cloud 3.2.29",
"Checkov by Prisma Cloud 3.2.30",
"Checkov by Prisma Cloud 3.2.31",
"Checkov by Prisma Cloud 3.2.32",
"Checkov by Prisma Cloud 3.2.33",
"Checkov by Prisma Cloud 3.2.34",
"Checkov by Prisma Cloud 3.2.35",
"Checkov by Prisma Cloud 3.2.36",
"Checkov by Prisma Cloud 3.2.37",
"Checkov by Prisma Cloud 3.2.38",
"Checkov by Prisma Cloud 3.2.39",
"Checkov by Prisma Cloud 3.2.40",
"Checkov by Prisma Cloud 3.2.41",
"Checkov by Prisma Cloud 3.2.42",
"Checkov by Prisma Cloud 3.2.43",
"Checkov by Prisma Cloud 3.2.44",
"Checkov by Prisma Cloud 3.2.45",
"Checkov by Prisma Cloud 3.2.46",
"Checkov by Prisma Cloud 3.2.47",
"Checkov by Prisma Cloud 3.2.48",
"Checkov by Prisma Cloud 3.2.49",
"Checkov by Prisma Cloud 3.2.50",
"Checkov by Prisma Cloud 3.2.51",
"Checkov by Prisma Cloud 3.2.52",
"Checkov by Prisma Cloud 3.2.53",
"Checkov by Prisma Cloud 3.2.54",
"Checkov by Prisma Cloud 3.2.55",
"Checkov by Prisma Cloud 3.2.56",
"Checkov by Prisma Cloud 3.2.57",
"Checkov by Prisma Cloud 3.2.58",
"Checkov by Prisma Cloud 3.2.59",
"Checkov by Prisma Cloud 3.2.60",
"Checkov by Prisma Cloud 3.2.61",
"Checkov by Prisma Cloud 3.2.62",
"Checkov by Prisma Cloud 3.2.63",
"Checkov by Prisma Cloud 3.2.64",
"Checkov by Prisma Cloud 3.2.65",
"Checkov by Prisma Cloud 3.2.66",
"Checkov by Prisma Cloud 3.2.67",
"Checkov by Prisma Cloud 3.2.68",
"Checkov by Prisma Cloud 3.2.69",
"Checkov by Prisma Cloud 3.2.70",
"Checkov by Prisma Cloud 3.2.71",
"Checkov by Prisma Cloud 3.2.72",
"Checkov by Prisma Cloud 3.2.73",
"Checkov by Prisma Cloud 3.2.74",
"Checkov by Prisma Cloud 3.2.75",
"Checkov by Prisma Cloud 3.2.76",
"Checkov by Prisma Cloud 3.2.77",
"Checkov by Prisma Cloud 3.2.78",
"Checkov by Prisma Cloud 3.2.79",
"Checkov by Prisma Cloud 3.2.80",
"Checkov by Prisma Cloud 3.2.81",
"Checkov by Prisma Cloud 3.2.82",
"Checkov by Prisma Cloud 3.2.83",
"Checkov by Prisma Cloud 3.2.84",
"Checkov by Prisma Cloud 3.2.85",
"Checkov by Prisma Cloud 3.2.86",
"Checkov by Prisma Cloud 3.2.87",
"Checkov by Prisma Cloud 3.2.88",
"Checkov by Prisma Cloud 3.2.89",
"Checkov by Prisma Cloud 3.2.90",
"Checkov by Prisma Cloud 3.2.91",
"Checkov by Prisma Cloud 3.2.92",
"Checkov by Prisma Cloud 3.2.93",
"Checkov by Prisma Cloud 3.2.94",
"Checkov by Prisma Cloud 3.2.95",
"Checkov by Prisma Cloud 3.2.96",
"Checkov by Prisma Cloud 3.2.97",
"Checkov by Prisma Cloud 3.2.98",
"Checkov by Prisma Cloud 3.2.99",
"Checkov by Prisma Cloud 3.2.100",
"Checkov by Prisma Cloud 3.2.101",
"Checkov by Prisma Cloud 3.2.102",
"Checkov by Prisma Cloud 3.2.103",
"Checkov by Prisma Cloud 3.2.104",
"Checkov by Prisma Cloud 3.2.105",
"Checkov by Prisma Cloud 3.2.106",
"Checkov by Prisma Cloud 3.2.107",
"Checkov by Prisma Cloud 3.2.108",
"Checkov by Prisma Cloud 3.2.109",
"Checkov by Prisma Cloud 3.2.110",
"Checkov by Prisma Cloud 3.2.111",
"Checkov by Prisma Cloud 3.2.112",
"Checkov by Prisma Cloud 3.2.113",
"Checkov by Prisma Cloud 3.2.114",
"Checkov by Prisma Cloud 3.2.115",
"Checkov by Prisma Cloud 3.2.116",
"Checkov by Prisma Cloud 3.2.117",
"Checkov by Prisma Cloud 3.2.118",
"Checkov by Prisma Cloud 3.2.119",
"Checkov by Prisma Cloud 3.2.120",
"Checkov by Prisma Cloud 3.2.121",
"Checkov by Prisma Cloud 3.2.122",
"Checkov by Prisma Cloud 3.2.123",
"Checkov by Prisma Cloud 3.2.124",
"Checkov by Prisma Cloud 3.2.125",
"Checkov by Prisma Cloud 3.2.126",
"Checkov by Prisma Cloud 3.2.127",
"Checkov by Prisma Cloud 3.2.128",
"Checkov by Prisma Cloud 3.2.129",
"Checkov by Prisma Cloud 3.2.130",
"Checkov by Prisma Cloud 3.2.131",
"Checkov by Prisma Cloud 3.2.132",
"Checkov by Prisma Cloud 3.2.133",
"Checkov by Prisma Cloud 3.2.134",
"Checkov by Prisma Cloud 3.2.135",
"Checkov by Prisma Cloud 3.2.136",
"Checkov by Prisma Cloud 3.2.137",
"Checkov by Prisma Cloud 3.2.138",
"Checkov by Prisma Cloud 3.2.139",
"Checkov by Prisma Cloud 3.2.140",
"Checkov by Prisma Cloud 3.2.141",
"Checkov by Prisma Cloud 3.2.142",
"Checkov by Prisma Cloud 3.2.143",
"Checkov by Prisma Cloud 3.2.144",
"Checkov by Prisma Cloud 3.2.145",
"Checkov by Prisma Cloud 3.2.146",
"Checkov by Prisma Cloud 3.2.147",
"Checkov by Prisma Cloud 3.2.148",
"Checkov by Prisma Cloud 3.2.149",
"Checkov by Prisma Cloud 3.2.150",
"Checkov by Prisma Cloud 3.2.151",
"Checkov by Prisma Cloud 3.2.152",
"Checkov by Prisma Cloud 3.2.153",
"Checkov by Prisma Cloud 3.2.154",
"Checkov by Prisma Cloud 3.2.155",
"Checkov by Prisma Cloud 3.2.156",
"Checkov by Prisma Cloud 3.2.157",
"Checkov by Prisma Cloud 3.2.158",
"Checkov by Prisma Cloud 3.2.159",
"Checkov by Prisma Cloud 3.2.160",
"Checkov by Prisma Cloud 3.2.161",
"Checkov by Prisma Cloud 3.2.162",
"Checkov by Prisma Cloud 3.2.163",
"Checkov by Prisma Cloud 3.2.164",
"Checkov by Prisma Cloud 3.2.165",
"Checkov by Prisma Cloud 3.2.166",
"Checkov by Prisma Cloud 3.2.167",
"Checkov by Prisma Cloud 3.2.168",
"Checkov by Prisma Cloud 3.2.169",
"Checkov by Prisma Cloud 3.2.170",
"Checkov by Prisma Cloud 3.2.171",
"Checkov by Prisma Cloud 3.2.172",
"Checkov by Prisma Cloud 3.2.173",
"Checkov by Prisma Cloud 3.2.174",
"Checkov by Prisma Cloud 3.2.175",
"Checkov by Prisma Cloud 3.2.176",
"Checkov by Prisma Cloud 3.2.177",
"Checkov by Prisma Cloud 3.2.178",
"Checkov by Prisma Cloud 3.2.179",
"Checkov by Prisma Cloud 3.2.180",
"Checkov by Prisma Cloud 3.2.181",
"Checkov by Prisma Cloud 3.2.182",
"Checkov by Prisma Cloud 3.2.183",
"Checkov by Prisma Cloud 3.2.184",
"Checkov by Prisma Cloud 3.2.185",
"Checkov by Prisma Cloud 3.2.186",
"Checkov by Prisma Cloud 3.2.187",
"Checkov by Prisma Cloud 3.2.188",
"Checkov by Prisma Cloud 3.2.189",
"Checkov by Prisma Cloud 3.2.190",
"Checkov by Prisma Cloud 3.2.191",
"Checkov by Prisma Cloud 3.2.192",
"Checkov by Prisma Cloud 3.2.193",
"Checkov by Prisma Cloud 3.2.194",
"Checkov by Prisma Cloud 3.2.195",
"Checkov by Prisma Cloud 3.2.196",
"Checkov by Prisma Cloud 3.2.197",
"Checkov by Prisma Cloud 3.2.198",
"Checkov by Prisma Cloud 3.2.199",
"Checkov by Prisma Cloud 3.2.200",
"Checkov by Prisma Cloud 3.2.201",
"Checkov by Prisma Cloud 3.2.202",
"Checkov by Prisma Cloud 3.2.203",
"Checkov by Prisma Cloud 3.2.204",
"Checkov by Prisma Cloud 3.2.205",
"Checkov by Prisma Cloud 3.2.206",
"Checkov by Prisma Cloud 3.2.207",
"Checkov by Prisma Cloud 3.2.208",
"Checkov by Prisma Cloud 3.2.209",
"Checkov by Prisma Cloud 3.2.210",
"Checkov by Prisma Cloud 3.2.211",
"Checkov by Prisma Cloud 3.2.212",
"Checkov by Prisma Cloud 3.2.213",
"Checkov by Prisma Cloud 3.2.214",
"Checkov by Prisma Cloud 3.2.215",
"Checkov by Prisma Cloud 3.2.216",
"Checkov by Prisma Cloud 3.2.217",
"Checkov by Prisma Cloud 3.2.218",
"Checkov by Prisma Cloud 3.2.219",
"Checkov by Prisma Cloud 3.2.220",
"Checkov by Prisma Cloud 3.2.221",
"Checkov by Prisma Cloud 3.2.222",
"Checkov by Prisma Cloud 3.2.223",
"Checkov by Prisma Cloud 3.2.224",
"Checkov by Prisma Cloud 3.2.225",
"Checkov by Prisma Cloud 3.2.226",
"Checkov by Prisma Cloud 3.2.227",
"Checkov by Prisma Cloud 3.2.228",
"Checkov by Prisma Cloud 3.2.229",
"Checkov by Prisma Cloud 3.2.230",
"Checkov by Prisma Cloud 3.2.231",
"Checkov by Prisma Cloud 3.2.232",
"Checkov by Prisma Cloud 3.2.233",
"Checkov by Prisma Cloud 3.2.234",
"Checkov by Prisma Cloud 3.2.235",
"Checkov by Prisma Cloud 3.2.236",
"Checkov by Prisma Cloud 3.2.237",
"Checkov by Prisma Cloud 3.2.238",
"Checkov by Prisma Cloud 3.2.239",
"Checkov by Prisma Cloud 3.2.240",
"Checkov by Prisma Cloud 3.2.241",
"Checkov by Prisma Cloud 3.2.242",
"Checkov by Prisma Cloud 3.2.243",
"Checkov by Prisma Cloud 3.2.244",
"Checkov by Prisma Cloud 3.2.245",
"Checkov by Prisma Cloud 3.2.246",
"Checkov by Prisma Cloud 3.2.247",
"Checkov by Prisma Cloud 3.2.248",
"Checkov by Prisma Cloud 3.2.249",
"Checkov by Prisma Cloud 3.2.250",
"Checkov by Prisma Cloud 3.2.251",
"Checkov by Prisma Cloud 3.2.252",
"Checkov by Prisma Cloud 3.2.253",
"Checkov by Prisma Cloud 3.2.254",
"Checkov by Prisma Cloud 3.2.255",
"Checkov by Prisma Cloud 3.2.256",
"Checkov by Prisma Cloud 3.2.257",
"Checkov by Prisma Cloud 3.2.258",
"Checkov by Prisma Cloud 3.2.259",
"Checkov by Prisma Cloud 3.2.260",
"Checkov by Prisma Cloud 3.2.261",
"Checkov by Prisma Cloud 3.2.262",
"Checkov by Prisma Cloud 3.2.263",
"Checkov by Prisma Cloud 3.2.264",
"Checkov by Prisma Cloud 3.2.265",
"Checkov by Prisma Cloud 3.2.266",
"Checkov by Prisma Cloud 3.2.267",
"Checkov by Prisma Cloud 3.2.268",
"Checkov by Prisma Cloud 3.2.269",
"Checkov by Prisma Cloud 3.2.270",
"Checkov by Prisma Cloud 3.2.271",
"Checkov by Prisma Cloud 3.2.272",
"Checkov by Prisma Cloud 3.2.273",
"Checkov by Prisma Cloud 3.2.274",
"Checkov by Prisma Cloud 3.2.275",
"Checkov by Prisma Cloud 3.2.276",
"Checkov by Prisma Cloud 3.2.277",
"Checkov by Prisma Cloud 3.2.278",
"Checkov by Prisma Cloud 3.2.279",
"Checkov by Prisma Cloud 3.2.280",
"Checkov by Prisma Cloud 3.2.281",
"Checkov by Prisma Cloud 3.2.282",
"Checkov by Prisma Cloud 3.2.283",
"Checkov by Prisma Cloud 3.2.284",
"Checkov by Prisma Cloud 3.2.285",
"Checkov by Prisma Cloud 3.2.286",
"Checkov by Prisma Cloud 3.2.287",
"Checkov by Prisma Cloud 3.2.288",
"Checkov by Prisma Cloud 3.2.289",
"Checkov by Prisma Cloud 3.2.290",
"Checkov by Prisma Cloud 3.2.291",
"Checkov by Prisma Cloud 3.2.292",
"Checkov by Prisma Cloud 3.2.293",
"Checkov by Prisma Cloud 3.2.294",
"Checkov by Prisma Cloud 3.2.295",
"Checkov by Prisma Cloud 3.2.296",
"Checkov by Prisma Cloud 3.2.297",
"Checkov by Prisma Cloud 3.2.298",
"Checkov by Prisma Cloud 3.2.299",
"Checkov by Prisma Cloud 3.2.300",
"Checkov by Prisma Cloud 3.2.301",
"Checkov by Prisma Cloud 3.2.302",
"Checkov by Prisma Cloud 3.2.303",
"Checkov by Prisma Cloud 3.2.304",
"Checkov by Prisma Cloud 3.2.305",
"Checkov by Prisma Cloud 3.2.306",
"Checkov by Prisma Cloud 3.2.307",
"Checkov by Prisma Cloud 3.2.308",
"Checkov by Prisma Cloud 3.2.309",
"Checkov by Prisma Cloud 3.2.310",
"Checkov by Prisma Cloud 3.2.311",
"Checkov by Prisma Cloud 3.2.312",
"Checkov by Prisma Cloud 3.2.313",
"Checkov by Prisma Cloud 3.2.314",
"Checkov by Prisma Cloud 3.2.315",
"Checkov by Prisma Cloud 3.2.316",
"Checkov by Prisma Cloud 3.2.317",
"Checkov by Prisma Cloud 3.2.318",
"Checkov by Prisma Cloud 3.2.319",
"Checkov by Prisma Cloud 3.2.320",
"Checkov by Prisma Cloud 3.2.321",
"Checkov by Prisma Cloud 3.2.322",
"Checkov by Prisma Cloud 3.2.323",
"Checkov by Prisma Cloud 3.2.324",
"Checkov by Prisma Cloud 3.2.325",
"Checkov by Prisma Cloud 3.2.326",
"Checkov by Prisma Cloud 3.2.327",
"Checkov by Prisma Cloud 3.2.328",
"Checkov by Prisma Cloud 3.2.329",
"Checkov by Prisma Cloud 3.2.330",
"Checkov by Prisma Cloud 3.2.331",
"Checkov by Prisma Cloud 3.2.332",
"Checkov by Prisma Cloud 3.2.333",
"Checkov by Prisma Cloud 3.2.334",
"Checkov by Prisma Cloud 3.2.335",
"Checkov by Prisma Cloud 3.2.336",
"Checkov by Prisma Cloud 3.2.337",
"Checkov by Prisma Cloud 3.2.338",
"Checkov by Prisma Cloud 3.2.339",
"Checkov by Prisma Cloud 3.2.340",
"Checkov by Prisma Cloud 3.2.341",
"Checkov by Prisma Cloud 3.2.342",
"Checkov by Prisma Cloud 3.2.343",
"Checkov by Prisma Cloud 3.2.344",
"Checkov by Prisma Cloud 3.2.345",
"Checkov by Prisma Cloud 3.2.346",
"Checkov by Prisma Cloud 3.2.347",
"Checkov by Prisma Cloud 3.2.348",
"Checkov by Prisma Cloud 3.2.349",
"Checkov by Prisma Cloud 3.2.350",
"Checkov by Prisma Cloud 3.2.351",
"Checkov by Prisma Cloud 3.2.352",
"Checkov by Prisma Cloud 3.2.353",
"Checkov by Prisma Cloud 3.2.354",
"Checkov by Prisma Cloud 3.2.355",
"Checkov by Prisma Cloud 3.2.356",
"Checkov by Prisma Cloud 3.2.357",
"Checkov by Prisma Cloud 3.2.358",
"Checkov by Prisma Cloud 3.2.359",
"Checkov by Prisma Cloud 3.2.360",
"Checkov by Prisma Cloud 3.2.361",
"Checkov by Prisma Cloud 3.2.362",
"Checkov by Prisma Cloud 3.2.363",
"Checkov by Prisma Cloud 3.2.364",
"Checkov by Prisma Cloud 3.2.365",
"Checkov by Prisma Cloud 3.2.366",
"Checkov by Prisma Cloud 3.2.367",
"Checkov by Prisma Cloud 3.2.368",
"Checkov by Prisma Cloud 3.2.369",
"Checkov by Prisma Cloud 3.2.370",
"Checkov by Prisma Cloud 3.2.371",
"Checkov by Prisma Cloud 3.2.372",
"Checkov by Prisma Cloud 3.2.373",
"Checkov by Prisma Cloud 3.2.374",
"Checkov by Prisma Cloud 3.2.375",
"Checkov by Prisma Cloud 3.2.376",
"Checkov by Prisma Cloud 3.2.377",
"Checkov by Prisma Cloud 3.2.378",
"Checkov by Prisma Cloud 3.2.379",
"Checkov by Prisma Cloud 3.2.380",
"Checkov by Prisma Cloud 3.2.381",
"Checkov by Prisma Cloud 3.2.382",
"Checkov by Prisma Cloud 3.2.383",
"Checkov by Prisma Cloud 3.2.384",
"Checkov by Prisma Cloud 3.2.385",
"Checkov by Prisma Cloud 3.2.386",
"Checkov by Prisma Cloud 3.2.387",
"Checkov by Prisma Cloud 3.2.388",
"Checkov by Prisma Cloud 3.2.389",
"Checkov by Prisma Cloud 3.2.390",
"Checkov by Prisma Cloud 3.2.391",
"Checkov by Prisma Cloud 3.2.392",
"Checkov by Prisma Cloud 3.2.393",
"Checkov by Prisma Cloud 3.2.394",
"Checkov by Prisma Cloud 3.2.395",
"Checkov by Prisma Cloud 3.2.396",
"Checkov by Prisma Cloud 3.2.397",
"Checkov by Prisma Cloud 3.2.398",
"Checkov by Prisma Cloud 3.2.399",
"Checkov by Prisma Cloud 3.2.400",
"Checkov by Prisma Cloud 3.2.401",
"Checkov by Prisma Cloud 3.2.402",
"Checkov by Prisma Cloud 3.2.403",
"Checkov by Prisma Cloud 3.2.404",
"Checkov by Prisma Cloud 3.2.405",
"Checkov by Prisma Cloud 3.2.406",
"Checkov by Prisma Cloud 3.2.407",
"Checkov by Prisma Cloud 3.2.408",
"Checkov by Prisma Cloud 3.2.409",
"Checkov by Prisma Cloud 3.2.410",
"Checkov by Prisma Cloud 3.2.411",
"Checkov by Prisma Cloud 3.2.412",
"Checkov by Prisma Cloud 3.2.413",
"Checkov by Prisma Cloud 3.2.414",
"Checkov by Prisma Cloud 3.2.415",
"Checkov by Prisma Cloud 3.2.416",
"Checkov by Prisma Cloud 3.2.417",
"Checkov by Prisma Cloud 3.2.418",
"Checkov by Prisma Cloud 3.2.419",
"Checkov by Prisma Cloud 3.2.420",
"Checkov by Prisma Cloud 3.2.421",
"Checkov by Prisma Cloud 3.2.422",
"Checkov by Prisma Cloud 3.2.423",
"Checkov by Prisma Cloud 3.2.424",
"Checkov by Prisma Cloud 3.2.425",
"Checkov by Prisma Cloud 3.2.426",
"Checkov by Prisma Cloud 3.2.427",
"Checkov by Prisma Cloud 3.2.428",
"Checkov by Prisma Cloud 3.2.429",
"Checkov by Prisma Cloud 3.2.430",
"Checkov by Prisma Cloud 3.2.431",
"Checkov by Prisma Cloud 3.2.432",
"Checkov by Prisma Cloud 3.2.433",
"Checkov by Prisma Cloud 3.2.434",
"Checkov by Prisma Cloud 3.2.435",
"Checkov by Prisma Cloud 3.2.436",
"Checkov by Prisma Cloud 3.2.437",
"Checkov by Prisma Cloud 3.2.438",
"Checkov by Prisma Cloud 3.2.439",
"Checkov by Prisma Cloud 3.2.440",
"Checkov by Prisma Cloud 3.2.441",
"Checkov by Prisma Cloud 3.2.442",
"Checkov by Prisma Cloud 3.2.443",
"Checkov by Prisma Cloud 3.2.444",
"Checkov by Prisma Cloud 3.2.445",
"Checkov by Prisma Cloud 3.2.446",
"Checkov by Prisma Cloud 3.2.447",
"Checkov by Prisma Cloud 3.2.448",
"Checkov by Prisma Cloud 3.2.449",
"Checkov by Prisma Cloud 3.2.450",
"Checkov by Prisma Cloud 3.2.451",
"Checkov by Prisma Cloud 3.2.452",
"Checkov by Prisma Cloud 3.2.453",
"Checkov by Prisma Cloud 3.2.454",
"Checkov by Prisma Cloud 3.2.455",
"Checkov by Prisma Cloud 3.2.456",
"Checkov by Prisma Cloud 3.2.457",
"Checkov by Prisma Cloud 3.2.458",
"Checkov by Prisma Cloud 3.2.459",
"Checkov by Prisma Cloud 3.2.460",
"Checkov by Prisma Cloud 3.2.461",
"Checkov by Prisma Cloud 3.2.462",
"Checkov by Prisma Cloud 3.2.463",
"Checkov by Prisma Cloud 3.2.464",
"Checkov by Prisma Cloud 3.2.465",
"Checkov by Prisma Cloud 3.2.466",
"Checkov by Prisma Cloud 3.2.467",
"Checkov by Prisma Cloud 3.2.468",
"Checkov by Prisma Cloud 3.2.469",
"Checkov by Prisma Cloud 3.2.470",
"Checkov by Prisma Cloud 3.2.471",
"Checkov by Prisma Cloud 3.2.472",
"Checkov by Prisma Cloud 3.2.473",
"Checkov by Prisma Cloud 3.2.474",
"Checkov by Prisma Cloud 3.2.475",
"Checkov by Prisma Cloud 3.2.476",
"Checkov by Prisma Cloud 3.2.477",
"Checkov by Prisma Cloud 3.2.478",
"Checkov by Prisma Cloud 3.2.479",
"Checkov by Prisma Cloud 3.2.480",
"Checkov by Prisma Cloud 3.2.481",
"Checkov by Prisma Cloud 3.2.482",
"Checkov by Prisma Cloud 3.2.483",
"Checkov by Prisma Cloud 3.2.484",
"Checkov by Prisma Cloud 3.2.485",
"Checkov by Prisma Cloud 3.2.486",
"Checkov by Prisma Cloud 3.2.487",
"Checkov by Prisma Cloud 3.2.488",
"Checkov by Prisma Cloud 3.2.489",
"Checkov by Prisma Cloud 3.2.490",
"Checkov by Prisma Cloud 3.2.491",
"Checkov by Prisma Cloud 3.2.492",
"Checkov by Prisma Cloud 3.2.493",
"Checkov by Prisma Cloud 3.2.494",
"Checkov by Prisma Cloud 3.2.495",
"Checkov by Prisma Cloud 3.2.496",
"Checkov by Prisma Cloud 3.2.497",
"Checkov by Prisma Cloud 3.2.498",
"Checkov by Prisma Cloud 3.2.499",
"Checkov by Prisma Cloud 3.2.500",
"Checkov by Prisma Cloud 3.2.501"
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2026-0302",
"datePublished": "2026-09-10T06:05:20.011Z",
"dateReserved": "2025-11-03T20:45:00.329Z",
"dateUpdated": "2026-09-10T13:00:46.376Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-2181 (GCVE-0-2025-2181)
Vulnerability from nvd – Published: 2025-08-13 17:03 – Updated: 2025-08-13 20:31
VLAI
EPSS
VEX
Title
Checkov by Prisma Cloud: Cleartext Exposure of Credentials
Summary
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-08-13 20:31 UTC
CWE
- CWE-312 - Cleartext Storage of Sensitive Information
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.paloaltonetworks.com/CVE-2025-2181 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Affected:
3.2.0 , < 3.2.449
(custom)
|
Date Public
2025-08-13 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-2181",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-13T20:31:31.868823Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T20:31:43.129Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.449",
"status": "unaffected"
}
],
"lessThan": "3.2.449",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No special configuration is required to be affected by this issue."
}
],
"value": "No special configuration is required to be affected by this issue."
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Shashank Chaurasia"
}
],
"datePublic": "2025-08-13T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can result in the cleartext exposure of\u0026nbsp;Prisma Cloud access keys in Checkov\u0027s output.\u003c/p\u003e"
}
],
"value": "A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can result in the cleartext exposure of\u00a0Prisma Cloud access keys in Checkov\u0027s output."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-37",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-37 Retrieve Embedded Sensitive Data"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "ACTIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Attacker finds a Prisma Cloud access key in a Checkov output file that a user uploaded to an insecure location."
}
]
},
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Attacker gains access to a system and then finds a Checkov output file that contains an exposed Prisma Cloud access key."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "CWE-312 Cleartext Storage of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:03:03.787Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2025-2181"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.448\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.449 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available. All Prisma Cloud access keys used by Checkov should be rotated after upgrading to a fixed version (this step is recommended for all modes of using Checkov)."
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.448\n Upgrade to 3.2.449 or later.\n \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available. All Prisma Cloud access keys used by Checkov should be rotated after upgrading to a fixed version (this step is recommended for all modes of using Checkov)."
}
],
"source": {
"defect": [
"BCE-42897"
],
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2025-08-13T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: Cleartext Exposure of Credentials",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No known workarounds exist for this issue."
}
],
"value": "No known workarounds exist for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2025-2181",
"datePublished": "2025-08-13T17:03:03.787Z",
"dateReserved": "2025-03-10T17:56:23.828Z",
"dateUpdated": "2025-08-13T20:31:43.129Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-2180 (GCVE-0-2025-2180)
Vulnerability from nvd – Published: 2025-08-13 17:02 – Updated: 2025-08-13 17:21
VLAI
EPSS
VEX
Title
Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution
Summary
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud.
This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-08-13 17:20 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.paloaltonetworks.com/CVE-2025-2180 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Affected:
3.2.0 , < 3.2.415
(custom)
|
Date Public
2025-08-13 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-2180",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-13T17:20:30.282985Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:21:30.216Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.415",
"status": "unaffected"
}
],
"lessThan": "3.2.415",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
}
],
"value": "No special configuration is required to be vulnerable to this issue."
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Palo Alto Networks thanks Bryan Eastes for discovering and reporting this issue."
}
],
"datePublic": "2025-08-13T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma\u00ae Cloud.\u003cbr\u003e\u003cbr\u003eThis issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415."
}
],
"value": "An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma\u00ae Cloud.\n\nThis issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:02:47.899Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2025-2180"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.414\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.415 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.414\n Upgrade to 3.2.415 or later."
}
],
"source": {
"defect": [
"BCE-44235"
],
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2025-08-13T16:00:00.000Z",
"value": "Initial publication"
}
],
"title": "Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Do not run Checkov on terraform files from untrusted sources or pull requests."
}
],
"value": "Do not run Checkov on terraform files from untrusted sources or pull requests."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2025-2180",
"datePublished": "2025-08-13T17:02:47.899Z",
"dateReserved": "2025-03-10T17:56:22.502Z",
"dateUpdated": "2025-08-13T17:21:30.216Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-0302 (GCVE-0-2026-0302)
Vulnerability from cvelistv5 – Published: 2026-09-10 06:05 – Updated: 2026-09-10 13:00
VLAI
EPSS
VEX
Title
Checkov by Prisma Cloud: OS Command Injection Vulnerability
Summary
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 13:00 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0302 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Affected:
3.2.0 , < 3.2.502
(custom)
cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:* |
Date Public
2026-09-09 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0302",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T13:00:38.190667Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T13:00:46.376Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.502",
"status": "unaffected"
}
],
"lessThan": "3.2.502",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No special configuration is required to be affected by this issue.\u0026nbsp;"
}
],
"value": "No special configuration is required to be affected by this issue."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.502",
"versionStartIncluding": "3.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "George Gherasim"
}
],
"datePublic": "2026-09-09T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eAn OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov.\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local user to execute arbitrary commands in the processes running Checkov."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88 OS Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 1.1,
"baseSeverity": "LOW",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "LOW",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user is able to influence input consumed by a Checkov scan."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T06:05:20.011Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2026-0302"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through\u0026nbsp;3.2.501\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.502 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through\u00a03.2.501\n Upgrade to 3.2.502 or later."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-09-09T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: OS Command Injection Vulnerability",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No known workarounds exist for this issue."
}
],
"value": "No known workarounds exist for this issue."
}
],
"x_affectedList": [
"Checkov by Prisma Cloud 3.2.0",
"Checkov by Prisma Cloud 3.2.1",
"Checkov by Prisma Cloud 3.2.2",
"Checkov by Prisma Cloud 3.2.3",
"Checkov by Prisma Cloud 3.2.4",
"Checkov by Prisma Cloud 3.2.5",
"Checkov by Prisma Cloud 3.2.6",
"Checkov by Prisma Cloud 3.2.7",
"Checkov by Prisma Cloud 3.2.8",
"Checkov by Prisma Cloud 3.2.9",
"Checkov by Prisma Cloud 3.2.10",
"Checkov by Prisma Cloud 3.2.11",
"Checkov by Prisma Cloud 3.2.12",
"Checkov by Prisma Cloud 3.2.13",
"Checkov by Prisma Cloud 3.2.14",
"Checkov by Prisma Cloud 3.2.15",
"Checkov by Prisma Cloud 3.2.16",
"Checkov by Prisma Cloud 3.2.17",
"Checkov by Prisma Cloud 3.2.18",
"Checkov by Prisma Cloud 3.2.19",
"Checkov by Prisma Cloud 3.2.20",
"Checkov by Prisma Cloud 3.2.21",
"Checkov by Prisma Cloud 3.2.22",
"Checkov by Prisma Cloud 3.2.23",
"Checkov by Prisma Cloud 3.2.24",
"Checkov by Prisma Cloud 3.2.25",
"Checkov by Prisma Cloud 3.2.26",
"Checkov by Prisma Cloud 3.2.27",
"Checkov by Prisma Cloud 3.2.28",
"Checkov by Prisma Cloud 3.2.29",
"Checkov by Prisma Cloud 3.2.30",
"Checkov by Prisma Cloud 3.2.31",
"Checkov by Prisma Cloud 3.2.32",
"Checkov by Prisma Cloud 3.2.33",
"Checkov by Prisma Cloud 3.2.34",
"Checkov by Prisma Cloud 3.2.35",
"Checkov by Prisma Cloud 3.2.36",
"Checkov by Prisma Cloud 3.2.37",
"Checkov by Prisma Cloud 3.2.38",
"Checkov by Prisma Cloud 3.2.39",
"Checkov by Prisma Cloud 3.2.40",
"Checkov by Prisma Cloud 3.2.41",
"Checkov by Prisma Cloud 3.2.42",
"Checkov by Prisma Cloud 3.2.43",
"Checkov by Prisma Cloud 3.2.44",
"Checkov by Prisma Cloud 3.2.45",
"Checkov by Prisma Cloud 3.2.46",
"Checkov by Prisma Cloud 3.2.47",
"Checkov by Prisma Cloud 3.2.48",
"Checkov by Prisma Cloud 3.2.49",
"Checkov by Prisma Cloud 3.2.50",
"Checkov by Prisma Cloud 3.2.51",
"Checkov by Prisma Cloud 3.2.52",
"Checkov by Prisma Cloud 3.2.53",
"Checkov by Prisma Cloud 3.2.54",
"Checkov by Prisma Cloud 3.2.55",
"Checkov by Prisma Cloud 3.2.56",
"Checkov by Prisma Cloud 3.2.57",
"Checkov by Prisma Cloud 3.2.58",
"Checkov by Prisma Cloud 3.2.59",
"Checkov by Prisma Cloud 3.2.60",
"Checkov by Prisma Cloud 3.2.61",
"Checkov by Prisma Cloud 3.2.62",
"Checkov by Prisma Cloud 3.2.63",
"Checkov by Prisma Cloud 3.2.64",
"Checkov by Prisma Cloud 3.2.65",
"Checkov by Prisma Cloud 3.2.66",
"Checkov by Prisma Cloud 3.2.67",
"Checkov by Prisma Cloud 3.2.68",
"Checkov by Prisma Cloud 3.2.69",
"Checkov by Prisma Cloud 3.2.70",
"Checkov by Prisma Cloud 3.2.71",
"Checkov by Prisma Cloud 3.2.72",
"Checkov by Prisma Cloud 3.2.73",
"Checkov by Prisma Cloud 3.2.74",
"Checkov by Prisma Cloud 3.2.75",
"Checkov by Prisma Cloud 3.2.76",
"Checkov by Prisma Cloud 3.2.77",
"Checkov by Prisma Cloud 3.2.78",
"Checkov by Prisma Cloud 3.2.79",
"Checkov by Prisma Cloud 3.2.80",
"Checkov by Prisma Cloud 3.2.81",
"Checkov by Prisma Cloud 3.2.82",
"Checkov by Prisma Cloud 3.2.83",
"Checkov by Prisma Cloud 3.2.84",
"Checkov by Prisma Cloud 3.2.85",
"Checkov by Prisma Cloud 3.2.86",
"Checkov by Prisma Cloud 3.2.87",
"Checkov by Prisma Cloud 3.2.88",
"Checkov by Prisma Cloud 3.2.89",
"Checkov by Prisma Cloud 3.2.90",
"Checkov by Prisma Cloud 3.2.91",
"Checkov by Prisma Cloud 3.2.92",
"Checkov by Prisma Cloud 3.2.93",
"Checkov by Prisma Cloud 3.2.94",
"Checkov by Prisma Cloud 3.2.95",
"Checkov by Prisma Cloud 3.2.96",
"Checkov by Prisma Cloud 3.2.97",
"Checkov by Prisma Cloud 3.2.98",
"Checkov by Prisma Cloud 3.2.99",
"Checkov by Prisma Cloud 3.2.100",
"Checkov by Prisma Cloud 3.2.101",
"Checkov by Prisma Cloud 3.2.102",
"Checkov by Prisma Cloud 3.2.103",
"Checkov by Prisma Cloud 3.2.104",
"Checkov by Prisma Cloud 3.2.105",
"Checkov by Prisma Cloud 3.2.106",
"Checkov by Prisma Cloud 3.2.107",
"Checkov by Prisma Cloud 3.2.108",
"Checkov by Prisma Cloud 3.2.109",
"Checkov by Prisma Cloud 3.2.110",
"Checkov by Prisma Cloud 3.2.111",
"Checkov by Prisma Cloud 3.2.112",
"Checkov by Prisma Cloud 3.2.113",
"Checkov by Prisma Cloud 3.2.114",
"Checkov by Prisma Cloud 3.2.115",
"Checkov by Prisma Cloud 3.2.116",
"Checkov by Prisma Cloud 3.2.117",
"Checkov by Prisma Cloud 3.2.118",
"Checkov by Prisma Cloud 3.2.119",
"Checkov by Prisma Cloud 3.2.120",
"Checkov by Prisma Cloud 3.2.121",
"Checkov by Prisma Cloud 3.2.122",
"Checkov by Prisma Cloud 3.2.123",
"Checkov by Prisma Cloud 3.2.124",
"Checkov by Prisma Cloud 3.2.125",
"Checkov by Prisma Cloud 3.2.126",
"Checkov by Prisma Cloud 3.2.127",
"Checkov by Prisma Cloud 3.2.128",
"Checkov by Prisma Cloud 3.2.129",
"Checkov by Prisma Cloud 3.2.130",
"Checkov by Prisma Cloud 3.2.131",
"Checkov by Prisma Cloud 3.2.132",
"Checkov by Prisma Cloud 3.2.133",
"Checkov by Prisma Cloud 3.2.134",
"Checkov by Prisma Cloud 3.2.135",
"Checkov by Prisma Cloud 3.2.136",
"Checkov by Prisma Cloud 3.2.137",
"Checkov by Prisma Cloud 3.2.138",
"Checkov by Prisma Cloud 3.2.139",
"Checkov by Prisma Cloud 3.2.140",
"Checkov by Prisma Cloud 3.2.141",
"Checkov by Prisma Cloud 3.2.142",
"Checkov by Prisma Cloud 3.2.143",
"Checkov by Prisma Cloud 3.2.144",
"Checkov by Prisma Cloud 3.2.145",
"Checkov by Prisma Cloud 3.2.146",
"Checkov by Prisma Cloud 3.2.147",
"Checkov by Prisma Cloud 3.2.148",
"Checkov by Prisma Cloud 3.2.149",
"Checkov by Prisma Cloud 3.2.150",
"Checkov by Prisma Cloud 3.2.151",
"Checkov by Prisma Cloud 3.2.152",
"Checkov by Prisma Cloud 3.2.153",
"Checkov by Prisma Cloud 3.2.154",
"Checkov by Prisma Cloud 3.2.155",
"Checkov by Prisma Cloud 3.2.156",
"Checkov by Prisma Cloud 3.2.157",
"Checkov by Prisma Cloud 3.2.158",
"Checkov by Prisma Cloud 3.2.159",
"Checkov by Prisma Cloud 3.2.160",
"Checkov by Prisma Cloud 3.2.161",
"Checkov by Prisma Cloud 3.2.162",
"Checkov by Prisma Cloud 3.2.163",
"Checkov by Prisma Cloud 3.2.164",
"Checkov by Prisma Cloud 3.2.165",
"Checkov by Prisma Cloud 3.2.166",
"Checkov by Prisma Cloud 3.2.167",
"Checkov by Prisma Cloud 3.2.168",
"Checkov by Prisma Cloud 3.2.169",
"Checkov by Prisma Cloud 3.2.170",
"Checkov by Prisma Cloud 3.2.171",
"Checkov by Prisma Cloud 3.2.172",
"Checkov by Prisma Cloud 3.2.173",
"Checkov by Prisma Cloud 3.2.174",
"Checkov by Prisma Cloud 3.2.175",
"Checkov by Prisma Cloud 3.2.176",
"Checkov by Prisma Cloud 3.2.177",
"Checkov by Prisma Cloud 3.2.178",
"Checkov by Prisma Cloud 3.2.179",
"Checkov by Prisma Cloud 3.2.180",
"Checkov by Prisma Cloud 3.2.181",
"Checkov by Prisma Cloud 3.2.182",
"Checkov by Prisma Cloud 3.2.183",
"Checkov by Prisma Cloud 3.2.184",
"Checkov by Prisma Cloud 3.2.185",
"Checkov by Prisma Cloud 3.2.186",
"Checkov by Prisma Cloud 3.2.187",
"Checkov by Prisma Cloud 3.2.188",
"Checkov by Prisma Cloud 3.2.189",
"Checkov by Prisma Cloud 3.2.190",
"Checkov by Prisma Cloud 3.2.191",
"Checkov by Prisma Cloud 3.2.192",
"Checkov by Prisma Cloud 3.2.193",
"Checkov by Prisma Cloud 3.2.194",
"Checkov by Prisma Cloud 3.2.195",
"Checkov by Prisma Cloud 3.2.196",
"Checkov by Prisma Cloud 3.2.197",
"Checkov by Prisma Cloud 3.2.198",
"Checkov by Prisma Cloud 3.2.199",
"Checkov by Prisma Cloud 3.2.200",
"Checkov by Prisma Cloud 3.2.201",
"Checkov by Prisma Cloud 3.2.202",
"Checkov by Prisma Cloud 3.2.203",
"Checkov by Prisma Cloud 3.2.204",
"Checkov by Prisma Cloud 3.2.205",
"Checkov by Prisma Cloud 3.2.206",
"Checkov by Prisma Cloud 3.2.207",
"Checkov by Prisma Cloud 3.2.208",
"Checkov by Prisma Cloud 3.2.209",
"Checkov by Prisma Cloud 3.2.210",
"Checkov by Prisma Cloud 3.2.211",
"Checkov by Prisma Cloud 3.2.212",
"Checkov by Prisma Cloud 3.2.213",
"Checkov by Prisma Cloud 3.2.214",
"Checkov by Prisma Cloud 3.2.215",
"Checkov by Prisma Cloud 3.2.216",
"Checkov by Prisma Cloud 3.2.217",
"Checkov by Prisma Cloud 3.2.218",
"Checkov by Prisma Cloud 3.2.219",
"Checkov by Prisma Cloud 3.2.220",
"Checkov by Prisma Cloud 3.2.221",
"Checkov by Prisma Cloud 3.2.222",
"Checkov by Prisma Cloud 3.2.223",
"Checkov by Prisma Cloud 3.2.224",
"Checkov by Prisma Cloud 3.2.225",
"Checkov by Prisma Cloud 3.2.226",
"Checkov by Prisma Cloud 3.2.227",
"Checkov by Prisma Cloud 3.2.228",
"Checkov by Prisma Cloud 3.2.229",
"Checkov by Prisma Cloud 3.2.230",
"Checkov by Prisma Cloud 3.2.231",
"Checkov by Prisma Cloud 3.2.232",
"Checkov by Prisma Cloud 3.2.233",
"Checkov by Prisma Cloud 3.2.234",
"Checkov by Prisma Cloud 3.2.235",
"Checkov by Prisma Cloud 3.2.236",
"Checkov by Prisma Cloud 3.2.237",
"Checkov by Prisma Cloud 3.2.238",
"Checkov by Prisma Cloud 3.2.239",
"Checkov by Prisma Cloud 3.2.240",
"Checkov by Prisma Cloud 3.2.241",
"Checkov by Prisma Cloud 3.2.242",
"Checkov by Prisma Cloud 3.2.243",
"Checkov by Prisma Cloud 3.2.244",
"Checkov by Prisma Cloud 3.2.245",
"Checkov by Prisma Cloud 3.2.246",
"Checkov by Prisma Cloud 3.2.247",
"Checkov by Prisma Cloud 3.2.248",
"Checkov by Prisma Cloud 3.2.249",
"Checkov by Prisma Cloud 3.2.250",
"Checkov by Prisma Cloud 3.2.251",
"Checkov by Prisma Cloud 3.2.252",
"Checkov by Prisma Cloud 3.2.253",
"Checkov by Prisma Cloud 3.2.254",
"Checkov by Prisma Cloud 3.2.255",
"Checkov by Prisma Cloud 3.2.256",
"Checkov by Prisma Cloud 3.2.257",
"Checkov by Prisma Cloud 3.2.258",
"Checkov by Prisma Cloud 3.2.259",
"Checkov by Prisma Cloud 3.2.260",
"Checkov by Prisma Cloud 3.2.261",
"Checkov by Prisma Cloud 3.2.262",
"Checkov by Prisma Cloud 3.2.263",
"Checkov by Prisma Cloud 3.2.264",
"Checkov by Prisma Cloud 3.2.265",
"Checkov by Prisma Cloud 3.2.266",
"Checkov by Prisma Cloud 3.2.267",
"Checkov by Prisma Cloud 3.2.268",
"Checkov by Prisma Cloud 3.2.269",
"Checkov by Prisma Cloud 3.2.270",
"Checkov by Prisma Cloud 3.2.271",
"Checkov by Prisma Cloud 3.2.272",
"Checkov by Prisma Cloud 3.2.273",
"Checkov by Prisma Cloud 3.2.274",
"Checkov by Prisma Cloud 3.2.275",
"Checkov by Prisma Cloud 3.2.276",
"Checkov by Prisma Cloud 3.2.277",
"Checkov by Prisma Cloud 3.2.278",
"Checkov by Prisma Cloud 3.2.279",
"Checkov by Prisma Cloud 3.2.280",
"Checkov by Prisma Cloud 3.2.281",
"Checkov by Prisma Cloud 3.2.282",
"Checkov by Prisma Cloud 3.2.283",
"Checkov by Prisma Cloud 3.2.284",
"Checkov by Prisma Cloud 3.2.285",
"Checkov by Prisma Cloud 3.2.286",
"Checkov by Prisma Cloud 3.2.287",
"Checkov by Prisma Cloud 3.2.288",
"Checkov by Prisma Cloud 3.2.289",
"Checkov by Prisma Cloud 3.2.290",
"Checkov by Prisma Cloud 3.2.291",
"Checkov by Prisma Cloud 3.2.292",
"Checkov by Prisma Cloud 3.2.293",
"Checkov by Prisma Cloud 3.2.294",
"Checkov by Prisma Cloud 3.2.295",
"Checkov by Prisma Cloud 3.2.296",
"Checkov by Prisma Cloud 3.2.297",
"Checkov by Prisma Cloud 3.2.298",
"Checkov by Prisma Cloud 3.2.299",
"Checkov by Prisma Cloud 3.2.300",
"Checkov by Prisma Cloud 3.2.301",
"Checkov by Prisma Cloud 3.2.302",
"Checkov by Prisma Cloud 3.2.303",
"Checkov by Prisma Cloud 3.2.304",
"Checkov by Prisma Cloud 3.2.305",
"Checkov by Prisma Cloud 3.2.306",
"Checkov by Prisma Cloud 3.2.307",
"Checkov by Prisma Cloud 3.2.308",
"Checkov by Prisma Cloud 3.2.309",
"Checkov by Prisma Cloud 3.2.310",
"Checkov by Prisma Cloud 3.2.311",
"Checkov by Prisma Cloud 3.2.312",
"Checkov by Prisma Cloud 3.2.313",
"Checkov by Prisma Cloud 3.2.314",
"Checkov by Prisma Cloud 3.2.315",
"Checkov by Prisma Cloud 3.2.316",
"Checkov by Prisma Cloud 3.2.317",
"Checkov by Prisma Cloud 3.2.318",
"Checkov by Prisma Cloud 3.2.319",
"Checkov by Prisma Cloud 3.2.320",
"Checkov by Prisma Cloud 3.2.321",
"Checkov by Prisma Cloud 3.2.322",
"Checkov by Prisma Cloud 3.2.323",
"Checkov by Prisma Cloud 3.2.324",
"Checkov by Prisma Cloud 3.2.325",
"Checkov by Prisma Cloud 3.2.326",
"Checkov by Prisma Cloud 3.2.327",
"Checkov by Prisma Cloud 3.2.328",
"Checkov by Prisma Cloud 3.2.329",
"Checkov by Prisma Cloud 3.2.330",
"Checkov by Prisma Cloud 3.2.331",
"Checkov by Prisma Cloud 3.2.332",
"Checkov by Prisma Cloud 3.2.333",
"Checkov by Prisma Cloud 3.2.334",
"Checkov by Prisma Cloud 3.2.335",
"Checkov by Prisma Cloud 3.2.336",
"Checkov by Prisma Cloud 3.2.337",
"Checkov by Prisma Cloud 3.2.338",
"Checkov by Prisma Cloud 3.2.339",
"Checkov by Prisma Cloud 3.2.340",
"Checkov by Prisma Cloud 3.2.341",
"Checkov by Prisma Cloud 3.2.342",
"Checkov by Prisma Cloud 3.2.343",
"Checkov by Prisma Cloud 3.2.344",
"Checkov by Prisma Cloud 3.2.345",
"Checkov by Prisma Cloud 3.2.346",
"Checkov by Prisma Cloud 3.2.347",
"Checkov by Prisma Cloud 3.2.348",
"Checkov by Prisma Cloud 3.2.349",
"Checkov by Prisma Cloud 3.2.350",
"Checkov by Prisma Cloud 3.2.351",
"Checkov by Prisma Cloud 3.2.352",
"Checkov by Prisma Cloud 3.2.353",
"Checkov by Prisma Cloud 3.2.354",
"Checkov by Prisma Cloud 3.2.355",
"Checkov by Prisma Cloud 3.2.356",
"Checkov by Prisma Cloud 3.2.357",
"Checkov by Prisma Cloud 3.2.358",
"Checkov by Prisma Cloud 3.2.359",
"Checkov by Prisma Cloud 3.2.360",
"Checkov by Prisma Cloud 3.2.361",
"Checkov by Prisma Cloud 3.2.362",
"Checkov by Prisma Cloud 3.2.363",
"Checkov by Prisma Cloud 3.2.364",
"Checkov by Prisma Cloud 3.2.365",
"Checkov by Prisma Cloud 3.2.366",
"Checkov by Prisma Cloud 3.2.367",
"Checkov by Prisma Cloud 3.2.368",
"Checkov by Prisma Cloud 3.2.369",
"Checkov by Prisma Cloud 3.2.370",
"Checkov by Prisma Cloud 3.2.371",
"Checkov by Prisma Cloud 3.2.372",
"Checkov by Prisma Cloud 3.2.373",
"Checkov by Prisma Cloud 3.2.374",
"Checkov by Prisma Cloud 3.2.375",
"Checkov by Prisma Cloud 3.2.376",
"Checkov by Prisma Cloud 3.2.377",
"Checkov by Prisma Cloud 3.2.378",
"Checkov by Prisma Cloud 3.2.379",
"Checkov by Prisma Cloud 3.2.380",
"Checkov by Prisma Cloud 3.2.381",
"Checkov by Prisma Cloud 3.2.382",
"Checkov by Prisma Cloud 3.2.383",
"Checkov by Prisma Cloud 3.2.384",
"Checkov by Prisma Cloud 3.2.385",
"Checkov by Prisma Cloud 3.2.386",
"Checkov by Prisma Cloud 3.2.387",
"Checkov by Prisma Cloud 3.2.388",
"Checkov by Prisma Cloud 3.2.389",
"Checkov by Prisma Cloud 3.2.390",
"Checkov by Prisma Cloud 3.2.391",
"Checkov by Prisma Cloud 3.2.392",
"Checkov by Prisma Cloud 3.2.393",
"Checkov by Prisma Cloud 3.2.394",
"Checkov by Prisma Cloud 3.2.395",
"Checkov by Prisma Cloud 3.2.396",
"Checkov by Prisma Cloud 3.2.397",
"Checkov by Prisma Cloud 3.2.398",
"Checkov by Prisma Cloud 3.2.399",
"Checkov by Prisma Cloud 3.2.400",
"Checkov by Prisma Cloud 3.2.401",
"Checkov by Prisma Cloud 3.2.402",
"Checkov by Prisma Cloud 3.2.403",
"Checkov by Prisma Cloud 3.2.404",
"Checkov by Prisma Cloud 3.2.405",
"Checkov by Prisma Cloud 3.2.406",
"Checkov by Prisma Cloud 3.2.407",
"Checkov by Prisma Cloud 3.2.408",
"Checkov by Prisma Cloud 3.2.409",
"Checkov by Prisma Cloud 3.2.410",
"Checkov by Prisma Cloud 3.2.411",
"Checkov by Prisma Cloud 3.2.412",
"Checkov by Prisma Cloud 3.2.413",
"Checkov by Prisma Cloud 3.2.414",
"Checkov by Prisma Cloud 3.2.415",
"Checkov by Prisma Cloud 3.2.416",
"Checkov by Prisma Cloud 3.2.417",
"Checkov by Prisma Cloud 3.2.418",
"Checkov by Prisma Cloud 3.2.419",
"Checkov by Prisma Cloud 3.2.420",
"Checkov by Prisma Cloud 3.2.421",
"Checkov by Prisma Cloud 3.2.422",
"Checkov by Prisma Cloud 3.2.423",
"Checkov by Prisma Cloud 3.2.424",
"Checkov by Prisma Cloud 3.2.425",
"Checkov by Prisma Cloud 3.2.426",
"Checkov by Prisma Cloud 3.2.427",
"Checkov by Prisma Cloud 3.2.428",
"Checkov by Prisma Cloud 3.2.429",
"Checkov by Prisma Cloud 3.2.430",
"Checkov by Prisma Cloud 3.2.431",
"Checkov by Prisma Cloud 3.2.432",
"Checkov by Prisma Cloud 3.2.433",
"Checkov by Prisma Cloud 3.2.434",
"Checkov by Prisma Cloud 3.2.435",
"Checkov by Prisma Cloud 3.2.436",
"Checkov by Prisma Cloud 3.2.437",
"Checkov by Prisma Cloud 3.2.438",
"Checkov by Prisma Cloud 3.2.439",
"Checkov by Prisma Cloud 3.2.440",
"Checkov by Prisma Cloud 3.2.441",
"Checkov by Prisma Cloud 3.2.442",
"Checkov by Prisma Cloud 3.2.443",
"Checkov by Prisma Cloud 3.2.444",
"Checkov by Prisma Cloud 3.2.445",
"Checkov by Prisma Cloud 3.2.446",
"Checkov by Prisma Cloud 3.2.447",
"Checkov by Prisma Cloud 3.2.448",
"Checkov by Prisma Cloud 3.2.449",
"Checkov by Prisma Cloud 3.2.450",
"Checkov by Prisma Cloud 3.2.451",
"Checkov by Prisma Cloud 3.2.452",
"Checkov by Prisma Cloud 3.2.453",
"Checkov by Prisma Cloud 3.2.454",
"Checkov by Prisma Cloud 3.2.455",
"Checkov by Prisma Cloud 3.2.456",
"Checkov by Prisma Cloud 3.2.457",
"Checkov by Prisma Cloud 3.2.458",
"Checkov by Prisma Cloud 3.2.459",
"Checkov by Prisma Cloud 3.2.460",
"Checkov by Prisma Cloud 3.2.461",
"Checkov by Prisma Cloud 3.2.462",
"Checkov by Prisma Cloud 3.2.463",
"Checkov by Prisma Cloud 3.2.464",
"Checkov by Prisma Cloud 3.2.465",
"Checkov by Prisma Cloud 3.2.466",
"Checkov by Prisma Cloud 3.2.467",
"Checkov by Prisma Cloud 3.2.468",
"Checkov by Prisma Cloud 3.2.469",
"Checkov by Prisma Cloud 3.2.470",
"Checkov by Prisma Cloud 3.2.471",
"Checkov by Prisma Cloud 3.2.472",
"Checkov by Prisma Cloud 3.2.473",
"Checkov by Prisma Cloud 3.2.474",
"Checkov by Prisma Cloud 3.2.475",
"Checkov by Prisma Cloud 3.2.476",
"Checkov by Prisma Cloud 3.2.477",
"Checkov by Prisma Cloud 3.2.478",
"Checkov by Prisma Cloud 3.2.479",
"Checkov by Prisma Cloud 3.2.480",
"Checkov by Prisma Cloud 3.2.481",
"Checkov by Prisma Cloud 3.2.482",
"Checkov by Prisma Cloud 3.2.483",
"Checkov by Prisma Cloud 3.2.484",
"Checkov by Prisma Cloud 3.2.485",
"Checkov by Prisma Cloud 3.2.486",
"Checkov by Prisma Cloud 3.2.487",
"Checkov by Prisma Cloud 3.2.488",
"Checkov by Prisma Cloud 3.2.489",
"Checkov by Prisma Cloud 3.2.490",
"Checkov by Prisma Cloud 3.2.491",
"Checkov by Prisma Cloud 3.2.492",
"Checkov by Prisma Cloud 3.2.493",
"Checkov by Prisma Cloud 3.2.494",
"Checkov by Prisma Cloud 3.2.495",
"Checkov by Prisma Cloud 3.2.496",
"Checkov by Prisma Cloud 3.2.497",
"Checkov by Prisma Cloud 3.2.498",
"Checkov by Prisma Cloud 3.2.499",
"Checkov by Prisma Cloud 3.2.500",
"Checkov by Prisma Cloud 3.2.501"
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2026-0302",
"datePublished": "2026-09-10T06:05:20.011Z",
"dateReserved": "2025-11-03T20:45:00.329Z",
"dateUpdated": "2026-09-10T13:00:46.376Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0303 (GCVE-0-2026-0303)
Vulnerability from cvelistv5 – Published: 2026-09-10 06:03 – Updated: 2026-09-10 13:01
VLAI
EPSS
VEX
Title
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File
Summary
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 13:01 UTC
CWE
- CWE-829 - Inclusion of Functionality from Untrusted Control Sphere
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.paloaltonetworks.com/CVE-2026-0303 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Affected:
3.2.0 , < 3.2.532
(custom)
cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:* |
Date Public
2026-09-09 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0303",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T13:01:15.631812Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T13:01:27.361Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.532",
"status": "unaffected"
}
],
"lessThan": "3.2.532",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
}
],
"value": "No special configuration is required to be vulnerable to this issue."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.2.532",
"versionStartIncluding": "3.2.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Michael Adedeji"
}
],
"datePublic": "2026-09-09T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.\u0026nbsp;\u003c/p\u003e"
}
],
"value": "A code execution vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.\u0026nbsp;"
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 2.4,
"baseSeverity": "LOW",
"exploitMaturity": "UNREPORTED",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-829",
"description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T06:03:50.513Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2026-0303"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.531\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.532or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.531\n Upgrade to 3.2.532or later.\n \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."
}
],
"source": {
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2026-09-09T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."
}
],
"x_affectedList": [
"Checkov by Prisma Cloud 3.2.0",
"Checkov by Prisma Cloud 3.2.1",
"Checkov by Prisma Cloud 3.2.2",
"Checkov by Prisma Cloud 3.2.3",
"Checkov by Prisma Cloud 3.2.4",
"Checkov by Prisma Cloud 3.2.5",
"Checkov by Prisma Cloud 3.2.6",
"Checkov by Prisma Cloud 3.2.7",
"Checkov by Prisma Cloud 3.2.8",
"Checkov by Prisma Cloud 3.2.9",
"Checkov by Prisma Cloud 3.2.10",
"Checkov by Prisma Cloud 3.2.11",
"Checkov by Prisma Cloud 3.2.12",
"Checkov by Prisma Cloud 3.2.13",
"Checkov by Prisma Cloud 3.2.14",
"Checkov by Prisma Cloud 3.2.15",
"Checkov by Prisma Cloud 3.2.16",
"Checkov by Prisma Cloud 3.2.17",
"Checkov by Prisma Cloud 3.2.18",
"Checkov by Prisma Cloud 3.2.19",
"Checkov by Prisma Cloud 3.2.20",
"Checkov by Prisma Cloud 3.2.21",
"Checkov by Prisma Cloud 3.2.22",
"Checkov by Prisma Cloud 3.2.23",
"Checkov by Prisma Cloud 3.2.24",
"Checkov by Prisma Cloud 3.2.25",
"Checkov by Prisma Cloud 3.2.26",
"Checkov by Prisma Cloud 3.2.27",
"Checkov by Prisma Cloud 3.2.28",
"Checkov by Prisma Cloud 3.2.29",
"Checkov by Prisma Cloud 3.2.30",
"Checkov by Prisma Cloud 3.2.31",
"Checkov by Prisma Cloud 3.2.32",
"Checkov by Prisma Cloud 3.2.33",
"Checkov by Prisma Cloud 3.2.34",
"Checkov by Prisma Cloud 3.2.35",
"Checkov by Prisma Cloud 3.2.36",
"Checkov by Prisma Cloud 3.2.37",
"Checkov by Prisma Cloud 3.2.38",
"Checkov by Prisma Cloud 3.2.39",
"Checkov by Prisma Cloud 3.2.40",
"Checkov by Prisma Cloud 3.2.41",
"Checkov by Prisma Cloud 3.2.42",
"Checkov by Prisma Cloud 3.2.43",
"Checkov by Prisma Cloud 3.2.44",
"Checkov by Prisma Cloud 3.2.45",
"Checkov by Prisma Cloud 3.2.46",
"Checkov by Prisma Cloud 3.2.47",
"Checkov by Prisma Cloud 3.2.48",
"Checkov by Prisma Cloud 3.2.49",
"Checkov by Prisma Cloud 3.2.50",
"Checkov by Prisma Cloud 3.2.51",
"Checkov by Prisma Cloud 3.2.52",
"Checkov by Prisma Cloud 3.2.53",
"Checkov by Prisma Cloud 3.2.54",
"Checkov by Prisma Cloud 3.2.55",
"Checkov by Prisma Cloud 3.2.56",
"Checkov by Prisma Cloud 3.2.57",
"Checkov by Prisma Cloud 3.2.58",
"Checkov by Prisma Cloud 3.2.59",
"Checkov by Prisma Cloud 3.2.60",
"Checkov by Prisma Cloud 3.2.61",
"Checkov by Prisma Cloud 3.2.62",
"Checkov by Prisma Cloud 3.2.63",
"Checkov by Prisma Cloud 3.2.64",
"Checkov by Prisma Cloud 3.2.65",
"Checkov by Prisma Cloud 3.2.66",
"Checkov by Prisma Cloud 3.2.67",
"Checkov by Prisma Cloud 3.2.68",
"Checkov by Prisma Cloud 3.2.69",
"Checkov by Prisma Cloud 3.2.70",
"Checkov by Prisma Cloud 3.2.71",
"Checkov by Prisma Cloud 3.2.72",
"Checkov by Prisma Cloud 3.2.73",
"Checkov by Prisma Cloud 3.2.74",
"Checkov by Prisma Cloud 3.2.75",
"Checkov by Prisma Cloud 3.2.76",
"Checkov by Prisma Cloud 3.2.77",
"Checkov by Prisma Cloud 3.2.78",
"Checkov by Prisma Cloud 3.2.79",
"Checkov by Prisma Cloud 3.2.80",
"Checkov by Prisma Cloud 3.2.81",
"Checkov by Prisma Cloud 3.2.82",
"Checkov by Prisma Cloud 3.2.83",
"Checkov by Prisma Cloud 3.2.84",
"Checkov by Prisma Cloud 3.2.85",
"Checkov by Prisma Cloud 3.2.86",
"Checkov by Prisma Cloud 3.2.87",
"Checkov by Prisma Cloud 3.2.88",
"Checkov by Prisma Cloud 3.2.89",
"Checkov by Prisma Cloud 3.2.90",
"Checkov by Prisma Cloud 3.2.91",
"Checkov by Prisma Cloud 3.2.92",
"Checkov by Prisma Cloud 3.2.93",
"Checkov by Prisma Cloud 3.2.94",
"Checkov by Prisma Cloud 3.2.95",
"Checkov by Prisma Cloud 3.2.96",
"Checkov by Prisma Cloud 3.2.97",
"Checkov by Prisma Cloud 3.2.98",
"Checkov by Prisma Cloud 3.2.99",
"Checkov by Prisma Cloud 3.2.100",
"Checkov by Prisma Cloud 3.2.101",
"Checkov by Prisma Cloud 3.2.102",
"Checkov by Prisma Cloud 3.2.103",
"Checkov by Prisma Cloud 3.2.104",
"Checkov by Prisma Cloud 3.2.105",
"Checkov by Prisma Cloud 3.2.106",
"Checkov by Prisma Cloud 3.2.107",
"Checkov by Prisma Cloud 3.2.108",
"Checkov by Prisma Cloud 3.2.109",
"Checkov by Prisma Cloud 3.2.110",
"Checkov by Prisma Cloud 3.2.111",
"Checkov by Prisma Cloud 3.2.112",
"Checkov by Prisma Cloud 3.2.113",
"Checkov by Prisma Cloud 3.2.114",
"Checkov by Prisma Cloud 3.2.115",
"Checkov by Prisma Cloud 3.2.116",
"Checkov by Prisma Cloud 3.2.117",
"Checkov by Prisma Cloud 3.2.118",
"Checkov by Prisma Cloud 3.2.119",
"Checkov by Prisma Cloud 3.2.120",
"Checkov by Prisma Cloud 3.2.121",
"Checkov by Prisma Cloud 3.2.122",
"Checkov by Prisma Cloud 3.2.123",
"Checkov by Prisma Cloud 3.2.124",
"Checkov by Prisma Cloud 3.2.125",
"Checkov by Prisma Cloud 3.2.126",
"Checkov by Prisma Cloud 3.2.127",
"Checkov by Prisma Cloud 3.2.128",
"Checkov by Prisma Cloud 3.2.129",
"Checkov by Prisma Cloud 3.2.130",
"Checkov by Prisma Cloud 3.2.131",
"Checkov by Prisma Cloud 3.2.132",
"Checkov by Prisma Cloud 3.2.133",
"Checkov by Prisma Cloud 3.2.134",
"Checkov by Prisma Cloud 3.2.135",
"Checkov by Prisma Cloud 3.2.136",
"Checkov by Prisma Cloud 3.2.137",
"Checkov by Prisma Cloud 3.2.138",
"Checkov by Prisma Cloud 3.2.139",
"Checkov by Prisma Cloud 3.2.140",
"Checkov by Prisma Cloud 3.2.141",
"Checkov by Prisma Cloud 3.2.142",
"Checkov by Prisma Cloud 3.2.143",
"Checkov by Prisma Cloud 3.2.144",
"Checkov by Prisma Cloud 3.2.145",
"Checkov by Prisma Cloud 3.2.146",
"Checkov by Prisma Cloud 3.2.147",
"Checkov by Prisma Cloud 3.2.148",
"Checkov by Prisma Cloud 3.2.149",
"Checkov by Prisma Cloud 3.2.150",
"Checkov by Prisma Cloud 3.2.151",
"Checkov by Prisma Cloud 3.2.152",
"Checkov by Prisma Cloud 3.2.153",
"Checkov by Prisma Cloud 3.2.154",
"Checkov by Prisma Cloud 3.2.155",
"Checkov by Prisma Cloud 3.2.156",
"Checkov by Prisma Cloud 3.2.157",
"Checkov by Prisma Cloud 3.2.158",
"Checkov by Prisma Cloud 3.2.159",
"Checkov by Prisma Cloud 3.2.160",
"Checkov by Prisma Cloud 3.2.161",
"Checkov by Prisma Cloud 3.2.162",
"Checkov by Prisma Cloud 3.2.163",
"Checkov by Prisma Cloud 3.2.164",
"Checkov by Prisma Cloud 3.2.165",
"Checkov by Prisma Cloud 3.2.166",
"Checkov by Prisma Cloud 3.2.167",
"Checkov by Prisma Cloud 3.2.168",
"Checkov by Prisma Cloud 3.2.169",
"Checkov by Prisma Cloud 3.2.170",
"Checkov by Prisma Cloud 3.2.171",
"Checkov by Prisma Cloud 3.2.172",
"Checkov by Prisma Cloud 3.2.173",
"Checkov by Prisma Cloud 3.2.174",
"Checkov by Prisma Cloud 3.2.175",
"Checkov by Prisma Cloud 3.2.176",
"Checkov by Prisma Cloud 3.2.177",
"Checkov by Prisma Cloud 3.2.178",
"Checkov by Prisma Cloud 3.2.179",
"Checkov by Prisma Cloud 3.2.180",
"Checkov by Prisma Cloud 3.2.181",
"Checkov by Prisma Cloud 3.2.182",
"Checkov by Prisma Cloud 3.2.183",
"Checkov by Prisma Cloud 3.2.184",
"Checkov by Prisma Cloud 3.2.185",
"Checkov by Prisma Cloud 3.2.186",
"Checkov by Prisma Cloud 3.2.187",
"Checkov by Prisma Cloud 3.2.188",
"Checkov by Prisma Cloud 3.2.189",
"Checkov by Prisma Cloud 3.2.190",
"Checkov by Prisma Cloud 3.2.191",
"Checkov by Prisma Cloud 3.2.192",
"Checkov by Prisma Cloud 3.2.193",
"Checkov by Prisma Cloud 3.2.194",
"Checkov by Prisma Cloud 3.2.195",
"Checkov by Prisma Cloud 3.2.196",
"Checkov by Prisma Cloud 3.2.197",
"Checkov by Prisma Cloud 3.2.198",
"Checkov by Prisma Cloud 3.2.199",
"Checkov by Prisma Cloud 3.2.200",
"Checkov by Prisma Cloud 3.2.201",
"Checkov by Prisma Cloud 3.2.202",
"Checkov by Prisma Cloud 3.2.203",
"Checkov by Prisma Cloud 3.2.204",
"Checkov by Prisma Cloud 3.2.205",
"Checkov by Prisma Cloud 3.2.206",
"Checkov by Prisma Cloud 3.2.207",
"Checkov by Prisma Cloud 3.2.208",
"Checkov by Prisma Cloud 3.2.209",
"Checkov by Prisma Cloud 3.2.210",
"Checkov by Prisma Cloud 3.2.211",
"Checkov by Prisma Cloud 3.2.212",
"Checkov by Prisma Cloud 3.2.213",
"Checkov by Prisma Cloud 3.2.214",
"Checkov by Prisma Cloud 3.2.215",
"Checkov by Prisma Cloud 3.2.216",
"Checkov by Prisma Cloud 3.2.217",
"Checkov by Prisma Cloud 3.2.218",
"Checkov by Prisma Cloud 3.2.219",
"Checkov by Prisma Cloud 3.2.220",
"Checkov by Prisma Cloud 3.2.221",
"Checkov by Prisma Cloud 3.2.222",
"Checkov by Prisma Cloud 3.2.223",
"Checkov by Prisma Cloud 3.2.224",
"Checkov by Prisma Cloud 3.2.225",
"Checkov by Prisma Cloud 3.2.226",
"Checkov by Prisma Cloud 3.2.227",
"Checkov by Prisma Cloud 3.2.228",
"Checkov by Prisma Cloud 3.2.229",
"Checkov by Prisma Cloud 3.2.230",
"Checkov by Prisma Cloud 3.2.231",
"Checkov by Prisma Cloud 3.2.232",
"Checkov by Prisma Cloud 3.2.233",
"Checkov by Prisma Cloud 3.2.234",
"Checkov by Prisma Cloud 3.2.235",
"Checkov by Prisma Cloud 3.2.236",
"Checkov by Prisma Cloud 3.2.237",
"Checkov by Prisma Cloud 3.2.238",
"Checkov by Prisma Cloud 3.2.239",
"Checkov by Prisma Cloud 3.2.240",
"Checkov by Prisma Cloud 3.2.241",
"Checkov by Prisma Cloud 3.2.242",
"Checkov by Prisma Cloud 3.2.243",
"Checkov by Prisma Cloud 3.2.244",
"Checkov by Prisma Cloud 3.2.245",
"Checkov by Prisma Cloud 3.2.246",
"Checkov by Prisma Cloud 3.2.247",
"Checkov by Prisma Cloud 3.2.248",
"Checkov by Prisma Cloud 3.2.249",
"Checkov by Prisma Cloud 3.2.250",
"Checkov by Prisma Cloud 3.2.251",
"Checkov by Prisma Cloud 3.2.252",
"Checkov by Prisma Cloud 3.2.253",
"Checkov by Prisma Cloud 3.2.254",
"Checkov by Prisma Cloud 3.2.255",
"Checkov by Prisma Cloud 3.2.256",
"Checkov by Prisma Cloud 3.2.257",
"Checkov by Prisma Cloud 3.2.258",
"Checkov by Prisma Cloud 3.2.259",
"Checkov by Prisma Cloud 3.2.260",
"Checkov by Prisma Cloud 3.2.261",
"Checkov by Prisma Cloud 3.2.262",
"Checkov by Prisma Cloud 3.2.263",
"Checkov by Prisma Cloud 3.2.264",
"Checkov by Prisma Cloud 3.2.265",
"Checkov by Prisma Cloud 3.2.266",
"Checkov by Prisma Cloud 3.2.267",
"Checkov by Prisma Cloud 3.2.268",
"Checkov by Prisma Cloud 3.2.269",
"Checkov by Prisma Cloud 3.2.270",
"Checkov by Prisma Cloud 3.2.271",
"Checkov by Prisma Cloud 3.2.272",
"Checkov by Prisma Cloud 3.2.273",
"Checkov by Prisma Cloud 3.2.274",
"Checkov by Prisma Cloud 3.2.275",
"Checkov by Prisma Cloud 3.2.276",
"Checkov by Prisma Cloud 3.2.277",
"Checkov by Prisma Cloud 3.2.278",
"Checkov by Prisma Cloud 3.2.279",
"Checkov by Prisma Cloud 3.2.280",
"Checkov by Prisma Cloud 3.2.281",
"Checkov by Prisma Cloud 3.2.282",
"Checkov by Prisma Cloud 3.2.283",
"Checkov by Prisma Cloud 3.2.284",
"Checkov by Prisma Cloud 3.2.285",
"Checkov by Prisma Cloud 3.2.286",
"Checkov by Prisma Cloud 3.2.287",
"Checkov by Prisma Cloud 3.2.288",
"Checkov by Prisma Cloud 3.2.289",
"Checkov by Prisma Cloud 3.2.290",
"Checkov by Prisma Cloud 3.2.291",
"Checkov by Prisma Cloud 3.2.292",
"Checkov by Prisma Cloud 3.2.293",
"Checkov by Prisma Cloud 3.2.294",
"Checkov by Prisma Cloud 3.2.295",
"Checkov by Prisma Cloud 3.2.296",
"Checkov by Prisma Cloud 3.2.297",
"Checkov by Prisma Cloud 3.2.298",
"Checkov by Prisma Cloud 3.2.299",
"Checkov by Prisma Cloud 3.2.300",
"Checkov by Prisma Cloud 3.2.301",
"Checkov by Prisma Cloud 3.2.302",
"Checkov by Prisma Cloud 3.2.303",
"Checkov by Prisma Cloud 3.2.304",
"Checkov by Prisma Cloud 3.2.305",
"Checkov by Prisma Cloud 3.2.306",
"Checkov by Prisma Cloud 3.2.307",
"Checkov by Prisma Cloud 3.2.308",
"Checkov by Prisma Cloud 3.2.309",
"Checkov by Prisma Cloud 3.2.310",
"Checkov by Prisma Cloud 3.2.311",
"Checkov by Prisma Cloud 3.2.312",
"Checkov by Prisma Cloud 3.2.313",
"Checkov by Prisma Cloud 3.2.314",
"Checkov by Prisma Cloud 3.2.315",
"Checkov by Prisma Cloud 3.2.316",
"Checkov by Prisma Cloud 3.2.317",
"Checkov by Prisma Cloud 3.2.318",
"Checkov by Prisma Cloud 3.2.319",
"Checkov by Prisma Cloud 3.2.320",
"Checkov by Prisma Cloud 3.2.321",
"Checkov by Prisma Cloud 3.2.322",
"Checkov by Prisma Cloud 3.2.323",
"Checkov by Prisma Cloud 3.2.324",
"Checkov by Prisma Cloud 3.2.325",
"Checkov by Prisma Cloud 3.2.326",
"Checkov by Prisma Cloud 3.2.327",
"Checkov by Prisma Cloud 3.2.328",
"Checkov by Prisma Cloud 3.2.329",
"Checkov by Prisma Cloud 3.2.330",
"Checkov by Prisma Cloud 3.2.331",
"Checkov by Prisma Cloud 3.2.332",
"Checkov by Prisma Cloud 3.2.333",
"Checkov by Prisma Cloud 3.2.334",
"Checkov by Prisma Cloud 3.2.335",
"Checkov by Prisma Cloud 3.2.336",
"Checkov by Prisma Cloud 3.2.337",
"Checkov by Prisma Cloud 3.2.338",
"Checkov by Prisma Cloud 3.2.339",
"Checkov by Prisma Cloud 3.2.340",
"Checkov by Prisma Cloud 3.2.341",
"Checkov by Prisma Cloud 3.2.342",
"Checkov by Prisma Cloud 3.2.343",
"Checkov by Prisma Cloud 3.2.344",
"Checkov by Prisma Cloud 3.2.345",
"Checkov by Prisma Cloud 3.2.346",
"Checkov by Prisma Cloud 3.2.347",
"Checkov by Prisma Cloud 3.2.348",
"Checkov by Prisma Cloud 3.2.349",
"Checkov by Prisma Cloud 3.2.350",
"Checkov by Prisma Cloud 3.2.351",
"Checkov by Prisma Cloud 3.2.352",
"Checkov by Prisma Cloud 3.2.353",
"Checkov by Prisma Cloud 3.2.354",
"Checkov by Prisma Cloud 3.2.355",
"Checkov by Prisma Cloud 3.2.356",
"Checkov by Prisma Cloud 3.2.357",
"Checkov by Prisma Cloud 3.2.358",
"Checkov by Prisma Cloud 3.2.359",
"Checkov by Prisma Cloud 3.2.360",
"Checkov by Prisma Cloud 3.2.361",
"Checkov by Prisma Cloud 3.2.362",
"Checkov by Prisma Cloud 3.2.363",
"Checkov by Prisma Cloud 3.2.364",
"Checkov by Prisma Cloud 3.2.365",
"Checkov by Prisma Cloud 3.2.366",
"Checkov by Prisma Cloud 3.2.367",
"Checkov by Prisma Cloud 3.2.368",
"Checkov by Prisma Cloud 3.2.369",
"Checkov by Prisma Cloud 3.2.370",
"Checkov by Prisma Cloud 3.2.371",
"Checkov by Prisma Cloud 3.2.372",
"Checkov by Prisma Cloud 3.2.373",
"Checkov by Prisma Cloud 3.2.374",
"Checkov by Prisma Cloud 3.2.375",
"Checkov by Prisma Cloud 3.2.376",
"Checkov by Prisma Cloud 3.2.377",
"Checkov by Prisma Cloud 3.2.378",
"Checkov by Prisma Cloud 3.2.379",
"Checkov by Prisma Cloud 3.2.380",
"Checkov by Prisma Cloud 3.2.381",
"Checkov by Prisma Cloud 3.2.382",
"Checkov by Prisma Cloud 3.2.383",
"Checkov by Prisma Cloud 3.2.384",
"Checkov by Prisma Cloud 3.2.385",
"Checkov by Prisma Cloud 3.2.386",
"Checkov by Prisma Cloud 3.2.387",
"Checkov by Prisma Cloud 3.2.388",
"Checkov by Prisma Cloud 3.2.389",
"Checkov by Prisma Cloud 3.2.390",
"Checkov by Prisma Cloud 3.2.391",
"Checkov by Prisma Cloud 3.2.392",
"Checkov by Prisma Cloud 3.2.393",
"Checkov by Prisma Cloud 3.2.394",
"Checkov by Prisma Cloud 3.2.395",
"Checkov by Prisma Cloud 3.2.396",
"Checkov by Prisma Cloud 3.2.397",
"Checkov by Prisma Cloud 3.2.398",
"Checkov by Prisma Cloud 3.2.399",
"Checkov by Prisma Cloud 3.2.400",
"Checkov by Prisma Cloud 3.2.401",
"Checkov by Prisma Cloud 3.2.402",
"Checkov by Prisma Cloud 3.2.403",
"Checkov by Prisma Cloud 3.2.404",
"Checkov by Prisma Cloud 3.2.405",
"Checkov by Prisma Cloud 3.2.406",
"Checkov by Prisma Cloud 3.2.407",
"Checkov by Prisma Cloud 3.2.408",
"Checkov by Prisma Cloud 3.2.409",
"Checkov by Prisma Cloud 3.2.410",
"Checkov by Prisma Cloud 3.2.411",
"Checkov by Prisma Cloud 3.2.412",
"Checkov by Prisma Cloud 3.2.413",
"Checkov by Prisma Cloud 3.2.414",
"Checkov by Prisma Cloud 3.2.415",
"Checkov by Prisma Cloud 3.2.416",
"Checkov by Prisma Cloud 3.2.417",
"Checkov by Prisma Cloud 3.2.418",
"Checkov by Prisma Cloud 3.2.419",
"Checkov by Prisma Cloud 3.2.420",
"Checkov by Prisma Cloud 3.2.421",
"Checkov by Prisma Cloud 3.2.422",
"Checkov by Prisma Cloud 3.2.423",
"Checkov by Prisma Cloud 3.2.424",
"Checkov by Prisma Cloud 3.2.425",
"Checkov by Prisma Cloud 3.2.426",
"Checkov by Prisma Cloud 3.2.427",
"Checkov by Prisma Cloud 3.2.428",
"Checkov by Prisma Cloud 3.2.429",
"Checkov by Prisma Cloud 3.2.430",
"Checkov by Prisma Cloud 3.2.431",
"Checkov by Prisma Cloud 3.2.432",
"Checkov by Prisma Cloud 3.2.433",
"Checkov by Prisma Cloud 3.2.434",
"Checkov by Prisma Cloud 3.2.435",
"Checkov by Prisma Cloud 3.2.436",
"Checkov by Prisma Cloud 3.2.437",
"Checkov by Prisma Cloud 3.2.438",
"Checkov by Prisma Cloud 3.2.439",
"Checkov by Prisma Cloud 3.2.440",
"Checkov by Prisma Cloud 3.2.441",
"Checkov by Prisma Cloud 3.2.442",
"Checkov by Prisma Cloud 3.2.443",
"Checkov by Prisma Cloud 3.2.444",
"Checkov by Prisma Cloud 3.2.445",
"Checkov by Prisma Cloud 3.2.446",
"Checkov by Prisma Cloud 3.2.447",
"Checkov by Prisma Cloud 3.2.448",
"Checkov by Prisma Cloud 3.2.449",
"Checkov by Prisma Cloud 3.2.450",
"Checkov by Prisma Cloud 3.2.451",
"Checkov by Prisma Cloud 3.2.452",
"Checkov by Prisma Cloud 3.2.453",
"Checkov by Prisma Cloud 3.2.454",
"Checkov by Prisma Cloud 3.2.455",
"Checkov by Prisma Cloud 3.2.456",
"Checkov by Prisma Cloud 3.2.457",
"Checkov by Prisma Cloud 3.2.458",
"Checkov by Prisma Cloud 3.2.459",
"Checkov by Prisma Cloud 3.2.460",
"Checkov by Prisma Cloud 3.2.461",
"Checkov by Prisma Cloud 3.2.462",
"Checkov by Prisma Cloud 3.2.463",
"Checkov by Prisma Cloud 3.2.464",
"Checkov by Prisma Cloud 3.2.465",
"Checkov by Prisma Cloud 3.2.466",
"Checkov by Prisma Cloud 3.2.467",
"Checkov by Prisma Cloud 3.2.468",
"Checkov by Prisma Cloud 3.2.469",
"Checkov by Prisma Cloud 3.2.470",
"Checkov by Prisma Cloud 3.2.471",
"Checkov by Prisma Cloud 3.2.472",
"Checkov by Prisma Cloud 3.2.473",
"Checkov by Prisma Cloud 3.2.474",
"Checkov by Prisma Cloud 3.2.475",
"Checkov by Prisma Cloud 3.2.476",
"Checkov by Prisma Cloud 3.2.477",
"Checkov by Prisma Cloud 3.2.478",
"Checkov by Prisma Cloud 3.2.479",
"Checkov by Prisma Cloud 3.2.480",
"Checkov by Prisma Cloud 3.2.481",
"Checkov by Prisma Cloud 3.2.482",
"Checkov by Prisma Cloud 3.2.483",
"Checkov by Prisma Cloud 3.2.484",
"Checkov by Prisma Cloud 3.2.485",
"Checkov by Prisma Cloud 3.2.486",
"Checkov by Prisma Cloud 3.2.487",
"Checkov by Prisma Cloud 3.2.488",
"Checkov by Prisma Cloud 3.2.489",
"Checkov by Prisma Cloud 3.2.490",
"Checkov by Prisma Cloud 3.2.491",
"Checkov by Prisma Cloud 3.2.492",
"Checkov by Prisma Cloud 3.2.493",
"Checkov by Prisma Cloud 3.2.494",
"Checkov by Prisma Cloud 3.2.495",
"Checkov by Prisma Cloud 3.2.496",
"Checkov by Prisma Cloud 3.2.497",
"Checkov by Prisma Cloud 3.2.498",
"Checkov by Prisma Cloud 3.2.499",
"Checkov by Prisma Cloud 3.2.500",
"Checkov by Prisma Cloud 3.2.501",
"Checkov by Prisma Cloud 3.2.502",
"Checkov by Prisma Cloud 3.2.503",
"Checkov by Prisma Cloud 3.2.504",
"Checkov by Prisma Cloud 3.2.505",
"Checkov by Prisma Cloud 3.2.506",
"Checkov by Prisma Cloud 3.2.507",
"Checkov by Prisma Cloud 3.2.508",
"Checkov by Prisma Cloud 3.2.509",
"Checkov by Prisma Cloud 3.2.510",
"Checkov by Prisma Cloud 3.2.511",
"Checkov by Prisma Cloud 3.2.512",
"Checkov by Prisma Cloud 3.2.513",
"Checkov by Prisma Cloud 3.2.514",
"Checkov by Prisma Cloud 3.2.515",
"Checkov by Prisma Cloud 3.2.516",
"Checkov by Prisma Cloud 3.2.517",
"Checkov by Prisma Cloud 3.2.518",
"Checkov by Prisma Cloud 3.2.519",
"Checkov by Prisma Cloud 3.2.520",
"Checkov by Prisma Cloud 3.2.521",
"Checkov by Prisma Cloud 3.2.522",
"Checkov by Prisma Cloud 3.2.523",
"Checkov by Prisma Cloud 3.2.524",
"Checkov by Prisma Cloud 3.2.525",
"Checkov by Prisma Cloud 3.2.526",
"Checkov by Prisma Cloud 3.2.527",
"Checkov by Prisma Cloud 3.2.528",
"Checkov by Prisma Cloud 3.2.529",
"Checkov by Prisma Cloud 3.2.530",
"Checkov by Prisma Cloud 3.2.531"
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2026-0303",
"datePublished": "2026-09-10T06:03:50.513Z",
"dateReserved": "2025-11-03T20:45:01.388Z",
"dateUpdated": "2026-09-10T13:01:27.361Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-2181 (GCVE-0-2025-2181)
Vulnerability from cvelistv5 – Published: 2025-08-13 17:03 – Updated: 2025-08-13 20:31
VLAI
EPSS
VEX
Title
Checkov by Prisma Cloud: Cleartext Exposure of Credentials
Summary
A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-08-13 20:31 UTC
CWE
- CWE-312 - Cleartext Storage of Sensitive Information
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.paloaltonetworks.com/CVE-2025-2181 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Affected:
3.2.0 , < 3.2.449
(custom)
|
Date Public
2025-08-13 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-2181",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-13T20:31:31.868823Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T20:31:43.129Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.449",
"status": "unaffected"
}
],
"lessThan": "3.2.449",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No special configuration is required to be affected by this issue."
}
],
"value": "No special configuration is required to be affected by this issue."
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Shashank Chaurasia"
}
],
"datePublic": "2025-08-13T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can result in the cleartext exposure of\u0026nbsp;Prisma Cloud access keys in Checkov\u0027s output.\u003c/p\u003e"
}
],
"value": "A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud can result in the cleartext exposure of\u00a0Prisma Cloud access keys in Checkov\u0027s output."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-37",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-37 Retrieve Embedded Sensitive Data"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "ACTIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Attacker finds a Prisma Cloud access key in a Checkov output file that a user uploaded to an insecure location."
}
]
},
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"privilegesRequired": "LOW",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "Attacker gains access to a system and then finds a Checkov output file that contains an exposed Prisma Cloud access key."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-312",
"description": "CWE-312 Cleartext Storage of Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:03:03.787Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2025-2181"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.448\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.449 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003eCheckov integration in Prisma Cloud is upgraded automatically when new versions become available. All Prisma Cloud access keys used by Checkov should be rotated after upgrading to a fixed version (this step is recommended for all modes of using Checkov)."
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.448\n Upgrade to 3.2.449 or later.\n \nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available. All Prisma Cloud access keys used by Checkov should be rotated after upgrading to a fixed version (this step is recommended for all modes of using Checkov)."
}
],
"source": {
"defect": [
"BCE-42897"
],
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2025-08-13T16:00:00.000Z",
"value": "Initial Publication"
}
],
"title": "Checkov by Prisma Cloud: Cleartext Exposure of Credentials",
"workarounds": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "No known workarounds exist for this issue."
}
],
"value": "No known workarounds exist for this issue."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2025-2181",
"datePublished": "2025-08-13T17:03:03.787Z",
"dateReserved": "2025-03-10T17:56:23.828Z",
"dateUpdated": "2025-08-13T20:31:43.129Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-2180 (GCVE-0-2025-2180)
Vulnerability from cvelistv5 – Published: 2025-08-13 17:02 – Updated: 2025-08-13 17:21
VLAI
EPSS
VEX
Title
Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution
Summary
An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud.
This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-08-13 17:20 UTC
CWE
- CWE-502 - Deserialization of Untrusted Data
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://security.paloaltonetworks.com/CVE-2025-2180 | vendor-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Palo Alto Networks | Checkov by Prisma Cloud |
Affected:
3.2.0 , < 3.2.415
(custom)
|
Date Public
2025-08-13 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-2180",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-13T17:20:30.282985Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:21:30.216Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Checkov by Prisma Cloud",
"vendor": "Palo Alto Networks",
"versions": [
{
"changes": [
{
"at": "3.2.415",
"status": "unaffected"
}
],
"lessThan": "3.2.415",
"status": "affected",
"version": "3.2.0",
"versionType": "custom"
}
]
}
],
"configurations": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan\u003eNo special configuration is required to be vulnerable to this issue.\u003c/span\u003e"
}
],
"value": "No special configuration is required to be vulnerable to this issue."
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Palo Alto Networks thanks Bryan Eastes for discovering and reporting this issue."
}
],
"datePublic": "2025-08-13T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma\u00ae Cloud.\u003cbr\u003e\u003cbr\u003eThis issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415."
}
],
"value": "An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma\u00ae Cloud.\n\nThis issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
}
],
"impacts": [
{
"capecId": "CAPEC-248",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-248 Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NO",
"Recovery": "USER",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "AMBER",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "PASSIVE",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "MODERATE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "If the user scans infrastructure as code (IaC) files from untrusted sources."
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-13T17:02:47.899Z",
"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"shortName": "palo_alto"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://security.paloaltonetworks.com/CVE-2025-2180"
}
],
"solutions": [
{
"lang": "eng",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n \u003ctd\u003eCheckov by Prisma Cloud 3.2\u003cbr\u003e\u003c/td\u003e\n \u003ctd\u003e3.2.0 through 3.2.414\u003c/td\u003e\n \u003ctd\u003eUpgrade to 3.2.415 or later.\u003c/td\u003e\n \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
}
],
"value": "Version\nMinor Version\nSuggested Solution\n\n Checkov by Prisma Cloud 3.2\n\n 3.2.0 through 3.2.414\n Upgrade to 3.2.415 or later."
}
],
"source": {
"defect": [
"BCE-44235"
],
"discovery": "EXTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2025-08-13T16:00:00.000Z",
"value": "Initial publication"
}
],
"title": "Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Do not run Checkov on terraform files from untrusted sources or pull requests."
}
],
"value": "Do not run Checkov on terraform files from untrusted sources or pull requests."
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
"assignerShortName": "palo_alto",
"cveId": "CVE-2025-2180",
"datePublished": "2025-08-13T17:02:47.899Z",
"dateReserved": "2025-03-10T17:56:22.502Z",
"dateUpdated": "2025-08-13T17:21:30.216Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CERTFR-2026-AVI-1156
Vulnerability from certfr_avis - Published: 2026-09-10 - Updated: 2026-09-10
De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une injection de code indirecte à distance (XSS).
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.3 antérieures à 6.3.3-h15 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.1.x antérieures à 12.1.10 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App toutes versions pour Android | ||
| Palo Alto Networks | Prisma Access | Prisma Access versions antérieures à 11.2.0 sans les derniers correctifs de sécurité | ||
| Palo Alto Networks | Prisma Access | Prisma Access versions antérieures à 10.2.0 sans les derniers correctifs de sécurité | ||
| Palo Alto Networks | Checkov by Prisma Cloud | Checkov by Prisma Cloud versions 3.2.x antérieures à 3.2.532 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.4-hx antérieures à 11.1.4-h36 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.2.x antérieures à 12.2.3 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions antérieures à 10.2.7-h37 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.0 antérieures à 6.0.15 | ||
| Palo Alto Networks | Cloud NGFW | Cloud NGFW toutes versions | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.13-hx antérieures à 11.2.13-h2 | ||
| Palo Alto Networks | Cortex XDR Broker | Cortex XDR Broker versions antérieures à 32.0.52 | ||
| Palo Alto Networks | Prisma Access | Prisma Access Agent versions antérieures à 26.2 pour Windows | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App toutes versions pour ChromeOS | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.4-hx antérieures à 11.2.4-h21 | ||
| Palo Alto Networks | Prisma Access | Prisma Access Agent versions antérieures à 26.3 pour Linux | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.2 antérieures à 6.2.8-h14 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App toutes versions pour iOS | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.16-hx antérieures à 11.1.16-h2 | ||
| Palo Alto Networks | Prisma Access | Prisma Browser versions antérieures à 151.26.5.170 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 12.1.4-hx antérieures à 12.1.4-h10 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "GlobalProtect App versions 6.3 ant\u00e9rieures \u00e0 6.3.3-h15",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.1.x ant\u00e9rieures \u00e0 12.1.10",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App toutes versions pour Android",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access versions ant\u00e9rieures \u00e0 11.2.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access versions ant\u00e9rieures \u00e0 10.2.0 sans les derniers correctifs de s\u00e9curit\u00e9",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Checkov by Prisma Cloud versions 3.2.x ant\u00e9rieures \u00e0 3.2.532",
"product": {
"name": "Checkov by Prisma Cloud",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.4-hx ant\u00e9rieures \u00e0 11.1.4-h36",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.2.x ant\u00e9rieures \u00e0 12.2.3",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions ant\u00e9rieures \u00e0 10.2.7-h37",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.0 ant\u00e9rieures \u00e0 6.0.15",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Cloud NGFW toutes versions",
"product": {
"name": "Cloud NGFW",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.13-hx ant\u00e9rieures \u00e0 11.2.13-h2",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Cortex XDR Broker versions ant\u00e9rieures \u00e0 32.0.52",
"product": {
"name": "Cortex XDR Broker",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access Agent versions ant\u00e9rieures \u00e0 26.2 pour Windows",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App toutes versions pour ChromeOS",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.4-hx ant\u00e9rieures \u00e0 11.2.4-h21",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Access Agent versions ant\u00e9rieures \u00e0 26.3 pour Linux",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.2 ant\u00e9rieures \u00e0 6.2.8-h14",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App toutes versions pour iOS",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.16-hx ant\u00e9rieures \u00e0 11.1.16-h2",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Prisma Browser versions ant\u00e9rieures \u00e0 151.26.5.170",
"product": {
"name": "Prisma Access",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 12.1.4-hx ant\u00e9rieures \u00e0 12.1.4-h10",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-84357",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84357"
},
{
"name": "CVE-2026-76046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76046"
},
{
"name": "CVE-2026-0305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0305"
},
{
"name": "CVE-2026-0308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0308"
},
{
"name": "CVE-2026-0303",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0303"
},
{
"name": "CVE-2026-79016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79016"
},
{
"name": "CVE-2026-84348",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84348"
},
{
"name": "CVE-2026-76020",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76020"
},
{
"name": "CVE-2026-0307",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0307"
},
{
"name": "CVE-2026-84351",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84351"
},
{
"name": "CVE-2026-0304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0304"
},
{
"name": "CVE-2026-79286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79286"
},
{
"name": "CVE-2026-76038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76038"
},
{
"name": "CVE-2026-79282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79282"
},
{
"name": "CVE-2026-79290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79290"
},
{
"name": "CVE-2026-0309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0309"
},
{
"name": "CVE-2026-84358",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84358"
},
{
"name": "CVE-2026-0302",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0302"
},
{
"name": "CVE-2026-79195",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79195"
},
{
"name": "CVE-2026-76022",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76022"
},
{
"name": "CVE-2026-79118",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79118"
},
{
"name": "CVE-2026-79293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79293"
},
{
"name": "CVE-2026-79032",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79032"
},
{
"name": "CVE-2026-76047",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76047"
},
{
"name": "CVE-2026-0310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0310"
},
{
"name": "CVE-2026-84350",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84350"
},
{
"name": "CVE-2026-84359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84359"
},
{
"name": "CVE-2026-0306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0306"
}
],
"initial_release_date": "2026-09-10T00:00:00",
"last_revision_date": "2026-09-10T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1156",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une injection de code indirecte \u00e0 distance (XSS).",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
"vendor_advisories": [
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0302"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0308",
"url": "https://security.paloaltonetworks.com/CVE-2026-0308"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2026-0012",
"url": "https://security.paloaltonetworks.com/PAN-SA-2026-0012"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0304"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0305"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0303",
"url": "https://security.paloaltonetworks.com/CVE-2026-0303"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0307"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0310",
"url": "https://security.paloaltonetworks.com/CVE-2026-0310"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks",
"url": "https://security.paloaltonetworks.com/CVE-2026-0306"
},
{
"published_at": "2026-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2026-0309",
"url": "https://security.paloaltonetworks.com/CVE-2026-0309"
}
]
}
CERTFR-2025-AVI-0695
Vulnerability from certfr_avis - Published: 2025-08-14 - Updated: 2025-08-14
De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Palo Alto Networks | Prisma Access Browser | Prisma Access Browser versions antérieures à 138.53.6.158 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions antérieures à 6.2.8-h3 (6.2.8-c263) pour Windows | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions antérieures à 6.3.3 pour Linux | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.2.x antérieures à 11.2.8 sur PA-7500 | ||
| Palo Alto Networks | GlobalProtect App | GlobalProtect App versions 6.3.x antérieures à 6.3.3-h2 (6.3.3-c676) pour Windows | ||
| Palo Alto Networks | Checkov by Prisma Cloud | Checkov by Prisma Cloud versions 3.2.x antérieures à 3.2.449 | ||
| Palo Alto Networks | PAN-OS | PAN-OS versions 11.1.x antérieures à 11.1.10 sur PA-7500 | ||
| Palo Alto Networks | Cortex XDR Broker | Cortex XDR Broker VM versions 28.0.x antérieures à 28.0.52 |
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Prisma Access Browser versions ant\u00e9rieures \u00e0 138.53.6.158",
"product": {
"name": "Prisma Access Browser",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.2.8-h3 (6.2.8-c263) pour Windows",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions ant\u00e9rieures \u00e0 6.3.3 pour Linux",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.2.x ant\u00e9rieures \u00e0 11.2.8 sur PA-7500",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "GlobalProtect App versions 6.3.x ant\u00e9rieures \u00e0 6.3.3-h2 (6.3.3-c676) pour Windows",
"product": {
"name": "GlobalProtect App",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Checkov by Prisma Cloud versions 3.2.x ant\u00e9rieures \u00e0 3.2.449",
"product": {
"name": "Checkov by Prisma Cloud",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "PAN-OS versions 11.1.x ant\u00e9rieures \u00e0 11.1.10 sur PA-7500",
"product": {
"name": "PAN-OS",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
},
{
"description": "Cortex XDR Broker VM versions 28.0.x ant\u00e9rieures \u00e0 28.0.52",
"product": {
"name": "Cortex XDR Broker",
"vendor": {
"name": "Palo Alto Networks",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-2182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2182"
},
{
"name": "CVE-2025-2183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2183"
},
{
"name": "CVE-2025-7656",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7656"
},
{
"name": "CVE-2025-7657",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7657"
},
{
"name": "CVE-2024-5921",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-5921"
},
{
"name": "CVE-2025-2184",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2184"
},
{
"name": "CVE-2025-8292",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8292"
},
{
"name": "CVE-2025-6558",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6558"
},
{
"name": "CVE-2025-8010",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8010"
},
{
"name": "CVE-2025-2181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2181"
},
{
"name": "CVE-2025-8011",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8011"
},
{
"name": "CVE-2025-2180",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2180"
}
],
"initial_release_date": "2025-08-14T00:00:00",
"last_revision_date": "2025-08-14T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0695",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Palo Alto Networks. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Palo Alto Networks",
"vendor_advisories": [
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2183",
"url": "https://security.paloaltonetworks.com/CVE-2025-2183"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2180",
"url": "https://security.paloaltonetworks.com/CVE-2025-2180"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2181",
"url": "https://security.paloaltonetworks.com/CVE-2025-2181"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2184",
"url": "https://security.paloaltonetworks.com/CVE-2025-2184"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks CVE-2025-2182",
"url": "https://security.paloaltonetworks.com/CVE-2025-2182"
},
{
"published_at": "2025-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Palo Alto Networks PAN-SA-2025-0014",
"url": "https://security.paloaltonetworks.com/PAN-SA-2025-0014"
}
]
}