Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-0303	Pendiente de análisis	Baja (2.4)	0.19%	💥 PoC	Paloaltonetworks Checkov BY Prisma Cloud^AI	10/9/2026	10/9/2026	A code execution vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can allow arbitrary code execution when Checkov scans a directory that contains an attacker-controlled configuration file.
CVE-2026-0302	Pendiente de análisis	Baja (1.1)	0.82%	—	Paloaltonetworks Checkov BY Prisma Cloud^AI	10/9/2026	10/9/2026	An OS command injection vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local user to execute arbitrary commands in the processes running Checkov.
CVE-2025-2181	Aplazada	Media (5.9)	0.16%	—	Paloaltonetworks Checkov^AI	13/8/2025	17/6/2026	A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of Prisma Cloud access keys in Checkov's output.
CVE-2025-2180	Aplazada	Media (4.8)	0.18%	—	Paloaltonetworks Checkov^AI	13/8/2025	17/6/2026	An unsafe deserialization vulnerability in Palo Alto Networks Checkov by Prisma® Cloud allows an authenticated user to execute arbitrary code as a non administrative user by scanning a malicious terraform file when using Checkov in Prisma® Cloud. This issue impacts Checkov 3.0 versions earlier than Checkov 3.2.415.
CVE-2021-3040	Modificada	Alta (7.2)	1.3%	—	Paloaltonetworks Bridgecrew Checkov	10/6/2021	17/6/2026	An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.
CVE-2021-3035	Modificada	Alta (7.2)	1.3%	—	Paloaltonetworks Bridgecrew Checkov	20/4/2021	17/6/2026	An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted.