CVE-2026-0302: falha de baixa gravidade em Palo Alto Networks Checkov by Prisma Cloud
Checkov by Prisma Cloud: OS Command Injection Vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 1.1epss 0.8%
An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Produtos afetados
Palo Alto Networks · Checkov by Prisma CloudCVEs relacionadas — Palo Alto Networks Checkov by Prisma Cloud
No mesmo produto, das mais perigosas para as menos.
CVE-2025-2180MEDIUMCheckov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code ExecutionEPSS 0.2%CVE-2026-0303LOWCheckov by Prisma Cloud: Code Execution via Auto-Loaded Configuration FileEPSS 0.2%CVE-2025-2181MEDIUMCheckov by Prisma Cloud: Cleartext Exposure of CredentialsEPSS 0.2%CVE-2026-0312MEDIUMCheckov by Prisma Cloud: Path Traversal VulnerabilitiesEPSS 0.1%CVE-2026-0311LOWCheckov by Prisma Cloud: Server-Side Request Forgery VulnerabilityEPSS 0.1%