CVE-2026-0312

N/A

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.

Affects 0 products across 1 vendor.

CVSS v44.3
EPSS0.1%
Percentile3th
PatchUnknown
CWE Weakness Definitions
CWE-22: Path Traversal

Attacker manipulates file path inputs to access files outside the intended directory.

Related Attack Patterns (CAPEC)
CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
via CWE-22
CAPEC-76 Manipulating Web Input to File System Calls
via CWE-22
CAPEC-78 Using Escaped Slashes in Alternate Encoding
via CWE-22
CAPEC-79 Using Slashes in Alternate Encoding
via CWE-22
CAPEC-126 Path Traversal
via CWE-22

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A unscored severity vulnerability (CVE-2026-0312) affects the target system. Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-0312?
A unscored severity vulnerability (CVE-2026-0312) affects the target system. Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.
Is CVE-2026-0312 actively exploited?
No confirmed active exploitation of CVE-2026-0312 as of 2026-10-18.
How do I remediate CVE-2026-0312?
Advisory: https://security.paloaltonetworks.com/CVE-2026-0312
What systems are affected by CVE-2026-0312?
CVE-2026-0312 affects Palo Alto Networks.
Vulnerability Details
CVE IDCVE-2026-0312
Published2026-10-14
Last Modified2026-10-15
ICS Relevance70%
Weakness (CWE)
Path Traversal
SourceNVD
Official Description

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductAffected Versions
Palo Alto Networks — —
Remediation
View Vendor Advisory →
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 3 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Palo Alto Networks
CVE-2012-6603 10.0 The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x befor... CVE-2012-6592 10.0 Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote ... CVE-2012-6593 10.0 Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote ... CVE-2012-6601 10.0 The device-management command-line interface in Palo Alto Networks PAN-OS bef... CVE-2020-2021 10.0 When Security Assertion Markup Language (SAML) authentication is enabled and ...
View all Palo Alto Networks CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →