CVE-2026-0311

Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability

Severity

Low 1.1

CVSS 4.0

Adjacent, local or physical access what this means

Exploited

Not listed

EPSS

0.001

1.1th percentile

Discovered by

Third party

Vendor-published field

Published

Oct 14, 2026

Assigned by palo_alto

Description

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.

Weakness: CWE-918

Affected products

Vendor	Product	Category	Matched by
Palo Alto Networks	Prisma Cloud	Cloud Security	cna-assigner

Vendor-reported products (1)

Palo Alto Networks · Checkov by Prisma Cloud

Credit

Muhammad Ibrahim

Vendor remediation

Version Minor Version Suggested Solution Checkov by Prisma Cloud3.2.0 through 3.2.532Upgrade to 3.2.533 or later. Checkov integration in Prisma Cloud is upgraded automatically when new versions become available.

References

Checkov Security Advisory

Something wrong here?