Skip to content
OpenAdvisories
Low WID-SEC-2026-3297 2 CVEs

Palo Alto Networks Checkov by Prisma Cloud: Mehrere Schwachstellen ermöglichen Codeausführung

Published Sep 9, 2026 · Updated Sep 9, 2026 · de-DE

Vendor: Palo Alto Networks Product: Prisma Cloud

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Palo Alto Networks Prisma Cloud ausnutzen, um beliebigen Programmcode auszuführen.

Product

Prisma Cloud ist eine Cloud-Native-Sicherheitsplattform (CNSP) zum Schutz von Anwendungen von der Erstellung bis zur Nutzung.

Vulnerabilities 2

  • Low 2.4
    CVE-2026-0303 Public exploit

    Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

    A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.

    Palo Alto Networks Checkov by Prisma Cloud Network devices
  • Low 1.1
    CVE-2026-0302

    Checkov by Prisma Cloud: OS Command Injection Vulnerability

    An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.

    Palo Alto Networks Checkov by Prisma Cloud Network devices

Revision history

  1. #1

    Initiale Fassung

References