Vulnerability in Palo Alto Networks Checkov By Prisma Cloud
CVE-2026-0303
A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@paloaltonetworks.com (vendor-advisory)
Frequently asked questions
- What is CVE-2026-0303?
- CVE-2026-0303 is a vulnerability in Palo Alto Networks Checkov By Prisma Cloud, classified under Inclusion of Functionality from Untrusted Control Sphere. Published 2026-09-10.
- Is CVE-2026-0303 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.