CVE-2026-0311

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0311", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "state": "PUBLISHED", "assignerShortName": "palo_alto", "dateReserved": "2025-11-03T20:45:09.854Z", "datePublished": "2026-10-14T20:29:19.297Z", "dateUpdated": "2026-10-15T16:43:45.351Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-10-14T20:29:19.297Z"}, "title": "Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability", "datePublic": "2026-10-14T16:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-664", "descriptions": [{"lang": "en", "value": "CAPEC-664 Server Side Request Forgery"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "versions": [{"status": "affected", "version": "0", "lessThan": "3.2.533", "changes": [{"at": "3.2.533", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.2.0", "versionEndExcluding": "3.2.533"}]}]}], "descriptions": [{"lang": "en", "value": "A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><span>A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.</span><br></p>"}]}], "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0311", "name": "Checkov Security Advisory", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "MODERATE", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "LOW", "baseScore": 1.1, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}], "configurations": [{"lang": "en", "value": "No special configuration is required.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No special configuration is required.&nbsp;<br></p>"}]}], "workarounds": [{"lang": "eng", "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."}]}], "solutions": [{"lang": "eng", "value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud3.2.0 through 3.2.532Upgrade to\u00a03.2.533\u00a0or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr><td>Checkov by Prisma Cloud</td><td><span>3.2.0 through 3.2.532</span></td><td>Upgrade to&nbsp;3.2.533&nbsp;or later.</td></tr></tbody></table><br>Checkov integration in Prisma Cloud is upgraded automatically when new versions become available."}]}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."}]}], "timeline": [{"time": "2026-10-14T16:00:00.000Z", "lang": "en", "value": "Initial Publication."}], "credits": [{"lang": "en", "value": "Muhammad Ibrahim", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "x_affectedList": ["Checkov by Prisma Cloud 3.2.0", "Checkov by Prisma Cloud 3.2.1", "Checkov by Prisma Cloud 3.2.2", "Checkov by Prisma Cloud 3.2.3", "Checkov by Prisma Cloud 3.2.4", "Checkov by Prisma Cloud 3.2.5", "Checkov by Prisma Cloud 3.2.6", "Checkov by Prisma Cloud 3.2.7", "Checkov by Prisma Cloud 3.2.8", "Checkov by Prisma Cloud 3.2.9", "Checkov by Prisma Cloud 3.2.10", "Checkov by Prisma Cloud 3.2.11", "Checkov by Prisma Cloud 3.2.12", "Checkov by Prisma Cloud 3.2.13", "Checkov by Prisma Cloud 3.2.14", "Checkov by Prisma Cloud 3.2.15", "Checkov by Prisma Cloud 3.2.16", "Checkov by Prisma Cloud 3.2.17", "Checkov by Prisma Cloud 3.2.18", "Checkov by Prisma Cloud 3.2.19", "Checkov by Prisma Cloud 3.2.20", "Checkov by Prisma Cloud 3.2.21", "Checkov by Prisma Cloud 3.2.22", "Checkov by Prisma Cloud 3.2.23", "Checkov by Prisma Cloud 3.2.24", "Checkov by Prisma Cloud 3.2.25", "Checkov by Prisma Cloud 3.2.26", "Checkov by Prisma Cloud 3.2.27", "Checkov by Prisma Cloud 3.2.28", "Checkov by Prisma Cloud 3.2.29", "Checkov by Prisma Cloud 3.2.30", "Checkov by Prisma Cloud 3.2.31", "Checkov by Prisma Cloud 3.2.32", "Checkov by Prisma Cloud 3.2.33", "Checkov by Prisma Cloud 3.2.34", "Checkov by Prisma Cloud 3.2.35", "Checkov by Prisma Cloud 3.2.36", "Checkov by Prisma Cloud 3.2.37", "Checkov by Prisma Cloud 3.2.38", "Checkov by Prisma Cloud 3.2.39", "Checkov by Prisma Cloud 3.2.40", "Checkov by Prisma Cloud 3.2.41", "Checkov by Prisma Cloud 3.2.42", "Checkov by Prisma Cloud 3.2.43", "Checkov by Prisma Cloud 3.2.44", "Checkov by Prisma Cloud 3.2.45", "Checkov by Prisma Cloud 3.2.46", "Checkov by Prisma Cloud 3.2.47", "Checkov by Prisma Cloud 3.2.48", "Checkov by Prisma Cloud 3.2.49", "Checkov by Prisma Cloud 3.2.50", "Checkov by Prisma Cloud 3.2.51", "Checkov by Prisma Cloud 3.2.52", "Checkov by Prisma Cloud 3.2.53", "Checkov by Prisma Cloud 3.2.54", "Checkov by Prisma Cloud 3.2.55", "Checkov by Prisma Cloud 3.2.56", "Checkov by Prisma Cloud 3.2.57", "Checkov by Prisma Cloud 3.2.58", "Checkov by Prisma Cloud 3.2.59", "Checkov by Prisma Cloud 3.2.60", "Checkov by Prisma Cloud 3.2.61", "Checkov by Prisma Cloud 3.2.62", "Checkov by Prisma Cloud 3.2.63", "Checkov by Prisma Cloud 3.2.64", "Checkov by Prisma Cloud 3.2.65", "Checkov by Prisma Cloud 3.2.66", "Checkov by Prisma Cloud 3.2.67", "Checkov by Prisma Cloud 3.2.68", "Checkov by Prisma Cloud 3.2.69", "Checkov by Prisma Cloud 3.2.70", "Checkov by Prisma Cloud 3.2.71", "Checkov by Prisma Cloud 3.2.72", "Checkov by Prisma Cloud 3.2.73", "Checkov by Prisma Cloud 3.2.74", "Checkov by Prisma Cloud 3.2.75", "Checkov by Prisma Cloud 3.2.76", "Checkov by Prisma Cloud 3.2.77", "Checkov by Prisma Cloud 3.2.78", "Checkov by Prisma Cloud 3.2.79", "Checkov by Prisma Cloud 3.2.80", "Checkov by Prisma Cloud 3.2.81", "Checkov by Prisma Cloud 3.2.82", "Checkov by Prisma Cloud 3.2.83", "Checkov by Prisma Cloud 3.2.84", "Checkov by Prisma Cloud 3.2.85", "Checkov by Prisma Cloud 3.2.86", "Checkov by Prisma Cloud 3.2.87", "Checkov by Prisma Cloud 3.2.88", "Checkov by Prisma Cloud 3.2.89", "Checkov by Prisma Cloud 3.2.90", "Checkov by Prisma Cloud 3.2.91", "Checkov by Prisma Cloud 3.2.92", "Checkov by Prisma Cloud 3.2.93", "Checkov by Prisma Cloud 3.2.94", "Checkov by Prisma Cloud 3.2.95", "Checkov by Prisma Cloud 3.2.96", "Checkov by Prisma Cloud 3.2.97", "Checkov by Prisma Cloud 3.2.98", "Checkov by Prisma Cloud 3.2.99", "Checkov by Prisma Cloud 3.2.100", "Checkov by Prisma Cloud 3.2.101", "Checkov by Prisma Cloud 3.2.102", "Checkov by Prisma Cloud 3.2.103", "Checkov by Prisma Cloud 3.2.104", "Checkov by Prisma Cloud 3.2.105", "Checkov by Prisma Cloud 3.2.106", "Checkov by Prisma Cloud 3.2.107", "Checkov by Prisma Cloud 3.2.108", "Checkov by Prisma Cloud 3.2.109", "Checkov by Prisma Cloud 3.2.110", "Checkov by Prisma Cloud 3.2.111", "Checkov by Prisma Cloud 3.2.112", "Checkov by Prisma Cloud 3.2.113", "Checkov by Prisma Cloud 3.2.114", "Checkov by Prisma Cloud 3.2.115", "Checkov by Prisma Cloud 3.2.116", "Checkov by Prisma Cloud 3.2.117", "Checkov by Prisma Cloud 3.2.118", "Checkov by Prisma Cloud 3.2.119", "Checkov by Prisma Cloud 3.2.120", "Checkov by Prisma Cloud 3.2.121", "Checkov by Prisma Cloud 3.2.122", "Checkov by Prisma Cloud 3.2.123", "Checkov by Prisma Cloud 3.2.124", "Checkov by Prisma Cloud 3.2.125", "Checkov by Prisma Cloud 3.2.126", "Checkov by Prisma Cloud 3.2.127", "Checkov by Prisma Cloud 3.2.128", "Checkov by Prisma Cloud 3.2.129", "Checkov by Prisma Cloud 3.2.130", "Checkov by Prisma Cloud 3.2.131", "Checkov by Prisma Cloud 3.2.132", "Checkov by Prisma Cloud 3.2.133", "Checkov by Prisma Cloud 3.2.134", "Checkov by Prisma Cloud 3.2.135", "Checkov by Prisma Cloud 3.2.136", "Checkov by Prisma Cloud 3.2.137", "Checkov by Prisma Cloud 3.2.138", "Checkov by Prisma Cloud 3.2.139", "Checkov by Prisma Cloud 3.2.140", "Checkov by Prisma Cloud 3.2.141", "Checkov by Prisma Cloud 3.2.142", "Checkov by Prisma Cloud 3.2.143", "Checkov by Prisma Cloud 3.2.144", "Checkov by Prisma Cloud 3.2.145", "Checkov by Prisma Cloud 3.2.146", "Checkov by Prisma Cloud 3.2.147", "Checkov by Prisma Cloud 3.2.148", "Checkov by Prisma Cloud 3.2.149", "Checkov by Prisma Cloud 3.2.150", "Checkov by Prisma Cloud 3.2.151", "Checkov by Prisma Cloud 3.2.152", "Checkov by Prisma Cloud 3.2.153", "Checkov by Prisma Cloud 3.2.154", "Checkov by Prisma Cloud 3.2.155", "Checkov by Prisma Cloud 3.2.156", "Checkov by Prisma Cloud 3.2.157", "Checkov by Prisma Cloud 3.2.158", "Checkov by Prisma Cloud 3.2.159", "Checkov by Prisma Cloud 3.2.160", "Checkov by Prisma Cloud 3.2.161", "Checkov by Prisma Cloud 3.2.162", "Checkov by Prisma Cloud 3.2.163", "Checkov by Prisma Cloud 3.2.164", "Checkov by Prisma Cloud 3.2.165", "Checkov by Prisma Cloud 3.2.166", "Checkov by Prisma Cloud 3.2.167", "Checkov by Prisma Cloud 3.2.168", "Checkov by Prisma Cloud 3.2.169", "Checkov by Prisma Cloud 3.2.170", "Checkov by Prisma Cloud 3.2.171", "Checkov by Prisma Cloud 3.2.172", "Checkov by Prisma Cloud 3.2.173", "Checkov by Prisma Cloud 3.2.174", "Checkov by Prisma Cloud 3.2.175", "Checkov by Prisma Cloud 3.2.176", "Checkov by Prisma Cloud 3.2.177", "Checkov by Prisma Cloud 3.2.178", "Checkov by Prisma Cloud 3.2.179", "Checkov by Prisma Cloud 3.2.180", "Checkov by Prisma Cloud 3.2.181", "Checkov by Prisma Cloud 3.2.182", "Checkov by Prisma Cloud 3.2.183", "Checkov by Prisma Cloud 3.2.184", "Checkov by Prisma Cloud 3.2.185", "Checkov by Prisma Cloud 3.2.186", "Checkov by Prisma Cloud 3.2.187", "Checkov by Prisma Cloud 3.2.188", "Checkov by Prisma Cloud 3.2.189", "Checkov by Prisma Cloud 3.2.190", "Checkov by Prisma Cloud 3.2.191", "Checkov by Prisma Cloud 3.2.192", "Checkov by Prisma Cloud 3.2.193", "Checkov by Prisma Cloud 3.2.194", "Checkov by Prisma Cloud 3.2.195", "Checkov by Prisma Cloud 3.2.196", "Checkov by Prisma Cloud 3.2.197", "Checkov by Prisma Cloud 3.2.198", "Checkov by Prisma Cloud 3.2.199", "Checkov by Prisma Cloud 3.2.200", "Checkov by Prisma Cloud 3.2.201", "Checkov by Prisma Cloud 3.2.202", "Checkov by Prisma Cloud 3.2.203", "Checkov by Prisma Cloud 3.2.204", "Checkov by Prisma Cloud 3.2.205", "Checkov by Prisma Cloud 3.2.206", "Checkov by Prisma Cloud 3.2.207", "Checkov by Prisma Cloud 3.2.208", "Checkov by Prisma Cloud 3.2.209", "Checkov by Prisma Cloud 3.2.210", "Checkov by Prisma Cloud 3.2.211", "Checkov by Prisma Cloud 3.2.212", "Checkov by Prisma Cloud 3.2.213", "Checkov by Prisma Cloud 3.2.214", "Checkov by Prisma Cloud 3.2.215", "Checkov by Prisma Cloud 3.2.216", "Checkov by Prisma Cloud 3.2.217", "Checkov by Prisma Cloud 3.2.218", "Checkov by Prisma Cloud 3.2.219", "Checkov by Prisma Cloud 3.2.220", "Checkov by Prisma Cloud 3.2.221", "Checkov by Prisma Cloud 3.2.222", "Checkov by Prisma Cloud 3.2.223", "Checkov by Prisma Cloud 3.2.224", "Checkov by Prisma Cloud 3.2.225", "Checkov by Prisma Cloud 3.2.226", "Checkov by Prisma Cloud 3.2.227", "Checkov by Prisma Cloud 3.2.228", "Checkov by Prisma Cloud 3.2.229", "Checkov by Prisma Cloud 3.2.230", "Checkov by Prisma Cloud 3.2.231", "Checkov by Prisma Cloud 3.2.232", "Checkov by Prisma Cloud 3.2.233", "Checkov by Prisma Cloud 3.2.234", "Checkov by Prisma Cloud 3.2.235", "Checkov by Prisma Cloud 3.2.236", "Checkov by Prisma Cloud 3.2.237", "Checkov by Prisma Cloud 3.2.238", "Checkov by Prisma Cloud 3.2.239", "Checkov by Prisma Cloud 3.2.240", "Checkov by Prisma Cloud 3.2.241", "Checkov by Prisma Cloud 3.2.242", "Checkov by Prisma Cloud 3.2.243", "Checkov by Prisma Cloud 3.2.244", "Checkov by Prisma Cloud 3.2.245", "Checkov by Prisma Cloud 3.2.246", "Checkov by Prisma Cloud 3.2.247", "Checkov by Prisma Cloud 3.2.248", "Checkov by Prisma Cloud 3.2.249", "Checkov by Prisma Cloud 3.2.250", "Checkov by Prisma Cloud 3.2.251", "Checkov by Prisma Cloud 3.2.252", "Checkov by Prisma Cloud 3.2.253", "Checkov by Prisma Cloud 3.2.254", "Checkov by Prisma Cloud 3.2.255", "Checkov by Prisma Cloud 3.2.256", "Checkov by Prisma Cloud 3.2.257", "Checkov by Prisma Cloud 3.2.258", "Checkov by Prisma Cloud 3.2.259", "Checkov by Prisma Cloud 3.2.260", "Checkov by Prisma Cloud 3.2.261", "Checkov by Prisma Cloud 3.2.262", "Checkov by Prisma Cloud 3.2.263", "Checkov by Prisma Cloud 3.2.264", "Checkov by Prisma Cloud 3.2.265", "Checkov by Prisma Cloud 3.2.266", "Checkov by Prisma Cloud 3.2.267", "Checkov by Prisma Cloud 3.2.268", "Checkov by Prisma Cloud 3.2.269", "Checkov by Prisma Cloud 3.2.270", "Checkov by Prisma Cloud 3.2.271", "Checkov by Prisma Cloud 3.2.272", "Checkov by Prisma Cloud 3.2.273", "Checkov by Prisma Cloud 3.2.274", "Checkov by Prisma Cloud 3.2.275", "Checkov by Prisma Cloud 3.2.276", "Checkov by Prisma Cloud 3.2.277", "Checkov by Prisma Cloud 3.2.278", "Checkov by Prisma Cloud 3.2.279", "Checkov by Prisma Cloud 3.2.280", "Checkov by Prisma Cloud 3.2.281", "Checkov by Prisma Cloud 3.2.282", "Checkov by Prisma Cloud 3.2.283", "Checkov by Prisma Cloud 3.2.284", "Checkov by Prisma Cloud 3.2.285", "Checkov by Prisma Cloud 3.2.286", "Checkov by Prisma Cloud 3.2.287", "Checkov by Prisma Cloud 3.2.288", "Checkov by Prisma Cloud 3.2.289", "Checkov by Prisma Cloud 3.2.290", "Checkov by Prisma Cloud 3.2.291", "Checkov by Prisma Cloud 3.2.292", "Checkov by Prisma Cloud 3.2.293", "Checkov by Prisma Cloud 3.2.294", "Checkov by Prisma Cloud 3.2.295", "Checkov by Prisma Cloud 3.2.296", "Checkov by Prisma Cloud 3.2.297", "Checkov by Prisma Cloud 3.2.298", "Checkov by Prisma Cloud 3.2.299", "Checkov by Prisma Cloud 3.2.300", "Checkov by Prisma Cloud 3.2.301", "Checkov by Prisma Cloud 3.2.302", "Checkov by Prisma Cloud 3.2.303", "Checkov by Prisma Cloud 3.2.304", "Checkov by Prisma Cloud 3.2.305", "Checkov by Prisma Cloud 3.2.306", "Checkov by Prisma Cloud 3.2.307", "Checkov by Prisma Cloud 3.2.308", "Checkov by Prisma Cloud 3.2.309", "Checkov by Prisma Cloud 3.2.310", "Checkov by Prisma Cloud 3.2.311", "Checkov by Prisma Cloud 3.2.312", "Checkov by Prisma Cloud 3.2.313", "Checkov by Prisma Cloud 3.2.314", "Checkov by Prisma Cloud 3.2.315", "Checkov by Prisma Cloud 3.2.316", "Checkov by Prisma Cloud 3.2.317", "Checkov by Prisma Cloud 3.2.318", "Checkov by Prisma Cloud 3.2.319", "Checkov by Prisma Cloud 3.2.320", "Checkov by Prisma Cloud 3.2.321", "Checkov by Prisma Cloud 3.2.322", "Checkov by Prisma Cloud 3.2.323", "Checkov by Prisma Cloud 3.2.324", "Checkov by Prisma Cloud 3.2.325", "Checkov by Prisma Cloud 3.2.326", "Checkov by Prisma Cloud 3.2.327", "Checkov by Prisma Cloud 3.2.328", "Checkov by Prisma Cloud 3.2.329", "Checkov by Prisma Cloud 3.2.330", "Checkov by Prisma Cloud 3.2.331", "Checkov by Prisma Cloud 3.2.332", "Checkov by Prisma Cloud 3.2.333", "Checkov by Prisma Cloud 3.2.334", "Checkov by Prisma Cloud 3.2.335", "Checkov by Prisma Cloud 3.2.336", "Checkov by Prisma Cloud 3.2.337", "Checkov by Prisma Cloud 3.2.338", "Checkov by Prisma Cloud 3.2.339", "Checkov by Prisma Cloud 3.2.340", "Checkov by Prisma Cloud 3.2.341", "Checkov by Prisma Cloud 3.2.342", "Checkov by Prisma Cloud 3.2.343", "Checkov by Prisma Cloud 3.2.344", "Checkov by Prisma Cloud 3.2.345", "Checkov by Prisma Cloud 3.2.346", "Checkov by Prisma Cloud 3.2.347", "Checkov by Prisma Cloud 3.2.348", "Checkov by Prisma Cloud 3.2.349", "Checkov by Prisma Cloud 3.2.350", "Checkov by Prisma Cloud 3.2.351", "Checkov by Prisma Cloud 3.2.352", "Checkov by Prisma Cloud 3.2.353", "Checkov by Prisma Cloud 3.2.354", "Checkov by Prisma Cloud 3.2.355", "Checkov by Prisma Cloud 3.2.356", "Checkov by Prisma Cloud 3.2.357", "Checkov by Prisma Cloud 3.2.358", "Checkov by Prisma Cloud 3.2.359", "Checkov by Prisma Cloud 3.2.360", "Checkov by Prisma Cloud 3.2.361", "Checkov by Prisma Cloud 3.2.362", "Checkov by Prisma Cloud 3.2.363", "Checkov by Prisma Cloud 3.2.364", "Checkov by Prisma Cloud 3.2.365", "Checkov by Prisma Cloud 3.2.366", "Checkov by Prisma Cloud 3.2.367", "Checkov by Prisma Cloud 3.2.368", "Checkov by Prisma Cloud 3.2.369", "Checkov by Prisma Cloud 3.2.370", "Checkov by Prisma Cloud 3.2.371", "Checkov by Prisma Cloud 3.2.372", "Checkov by Prisma Cloud 3.2.373", "Checkov by Prisma Cloud 3.2.374", "Checkov by Prisma Cloud 3.2.375", "Checkov by Prisma Cloud 3.2.376", "Checkov by Prisma Cloud 3.2.377", "Checkov by Prisma Cloud 3.2.378", "Checkov by Prisma Cloud 3.2.379", "Checkov by Prisma Cloud 3.2.380", "Checkov by Prisma Cloud 3.2.381", "Checkov by Prisma Cloud 3.2.382", "Checkov by Prisma Cloud 3.2.383", "Checkov by Prisma Cloud 3.2.384", "Checkov by Prisma Cloud 3.2.385", "Checkov by Prisma Cloud 3.2.386", "Checkov by Prisma Cloud 3.2.387", "Checkov by Prisma Cloud 3.2.388", "Checkov by Prisma Cloud 3.2.389", "Checkov by Prisma Cloud 3.2.390", "Checkov by Prisma Cloud 3.2.391", "Checkov by Prisma Cloud 3.2.392", "Checkov by Prisma Cloud 3.2.393", "Checkov by Prisma Cloud 3.2.394", "Checkov by Prisma Cloud 3.2.395", "Checkov by Prisma Cloud 3.2.396", "Checkov by Prisma Cloud 3.2.397", "Checkov by Prisma Cloud 3.2.398", "Checkov by Prisma Cloud 3.2.399", "Checkov by Prisma Cloud 3.2.400", "Checkov by Prisma Cloud 3.2.401", "Checkov by Prisma Cloud 3.2.402", "Checkov by Prisma Cloud 3.2.403", "Checkov by Prisma Cloud 3.2.404", "Checkov by Prisma Cloud 3.2.405", "Checkov by Prisma Cloud 3.2.406", "Checkov by Prisma Cloud 3.2.407", "Checkov by Prisma Cloud 3.2.408", "Checkov by Prisma Cloud 3.2.409", "Checkov by Prisma Cloud 3.2.410", "Checkov by Prisma Cloud 3.2.411", "Checkov by Prisma Cloud 3.2.412", "Checkov by Prisma Cloud 3.2.413", "Checkov by Prisma Cloud 3.2.414", "Checkov by Prisma Cloud 3.2.415", "Checkov by Prisma Cloud 3.2.416", "Checkov by Prisma Cloud 3.2.417", "Checkov by Prisma Cloud 3.2.418", "Checkov by Prisma Cloud 3.2.419", "Checkov by Prisma Cloud 3.2.420", "Checkov by Prisma Cloud 3.2.421", "Checkov by Prisma Cloud 3.2.422", "Checkov by Prisma Cloud 3.2.423", "Checkov by Prisma Cloud 3.2.424", "Checkov by Prisma Cloud 3.2.425", "Checkov by Prisma Cloud 3.2.426", "Checkov by Prisma Cloud 3.2.427", "Checkov by Prisma Cloud 3.2.428", "Checkov by Prisma Cloud 3.2.429", "Checkov by Prisma Cloud 3.2.430", "Checkov by Prisma Cloud 3.2.431", "Checkov by Prisma Cloud 3.2.432", "Checkov by Prisma Cloud 3.2.433", "Checkov by Prisma Cloud 3.2.434", "Checkov by Prisma Cloud 3.2.435", "Checkov by Prisma Cloud 3.2.436", "Checkov by Prisma Cloud 3.2.437", "Checkov by Prisma Cloud 3.2.438", "Checkov by Prisma Cloud 3.2.439", "Checkov by Prisma Cloud 3.2.440", "Checkov by Prisma Cloud 3.2.441", "Checkov by Prisma Cloud 3.2.442", "Checkov by Prisma Cloud 3.2.443", "Checkov by Prisma Cloud 3.2.444", "Checkov by Prisma Cloud 3.2.445", "Checkov by Prisma Cloud 3.2.446", "Checkov by Prisma Cloud 3.2.447", "Checkov by Prisma Cloud 3.2.448", "Checkov by Prisma Cloud 3.2.449", "Checkov by Prisma Cloud 3.2.450", "Checkov by Prisma Cloud 3.2.451", "Checkov by Prisma Cloud 3.2.452", "Checkov by Prisma Cloud 3.2.453", "Checkov by Prisma Cloud 3.2.454", "Checkov by Prisma Cloud 3.2.455", "Checkov by Prisma Cloud 3.2.456", "Checkov by Prisma Cloud 3.2.457", "Checkov by Prisma Cloud 3.2.458", "Checkov by Prisma Cloud 3.2.459", "Checkov by Prisma Cloud 3.2.460", "Checkov by Prisma Cloud 3.2.461", "Checkov by Prisma Cloud 3.2.462", "Checkov by Prisma Cloud 3.2.463", "Checkov by Prisma Cloud 3.2.464", "Checkov by Prisma Cloud 3.2.465", "Checkov by Prisma Cloud 3.2.466", "Checkov by Prisma Cloud 3.2.467", "Checkov by Prisma Cloud 3.2.468", "Checkov by Prisma Cloud 3.2.469", "Checkov by Prisma Cloud 3.2.470", "Checkov by Prisma Cloud 3.2.471", "Checkov by Prisma Cloud 3.2.472", "Checkov by Prisma Cloud 3.2.473", "Checkov by Prisma Cloud 3.2.474", "Checkov by Prisma Cloud 3.2.475", "Checkov by Prisma Cloud 3.2.476", "Checkov by Prisma Cloud 3.2.477", "Checkov by Prisma Cloud 3.2.478", "Checkov by Prisma Cloud 3.2.479", "Checkov by Prisma Cloud 3.2.480", "Checkov by Prisma Cloud 3.2.481", "Checkov by Prisma Cloud 3.2.482", "Checkov by Prisma Cloud 3.2.483", "Checkov by Prisma Cloud 3.2.484", "Checkov by Prisma Cloud 3.2.485", "Checkov by Prisma Cloud 3.2.486", "Checkov by Prisma Cloud 3.2.487", "Checkov by Prisma Cloud 3.2.488", "Checkov by Prisma Cloud 3.2.489", "Checkov by Prisma Cloud 3.2.490", "Checkov by Prisma Cloud 3.2.491", "Checkov by Prisma Cloud 3.2.492", "Checkov by Prisma Cloud 3.2.493", "Checkov by Prisma Cloud 3.2.494", "Checkov by Prisma Cloud 3.2.495", "Checkov by Prisma Cloud 3.2.496", "Checkov by Prisma Cloud 3.2.497", "Checkov by Prisma Cloud 3.2.498", "Checkov by Prisma Cloud 3.2.499", "Checkov by Prisma Cloud 3.2.500", "Checkov by Prisma Cloud 3.2.501", "Checkov by Prisma Cloud 3.2.502", "Checkov by Prisma Cloud 3.2.503", "Checkov by Prisma Cloud 3.2.504", "Checkov by Prisma Cloud 3.2.505", "Checkov by Prisma Cloud 3.2.506", "Checkov by Prisma Cloud 3.2.507", "Checkov by Prisma Cloud 3.2.508", "Checkov by Prisma Cloud 3.2.509", "Checkov by Prisma Cloud 3.2.510", "Checkov by Prisma Cloud 3.2.511", "Checkov by Prisma Cloud 3.2.512", "Checkov by Prisma Cloud 3.2.513", "Checkov by Prisma Cloud 3.2.514", "Checkov by Prisma Cloud 3.2.515", "Checkov by Prisma Cloud 3.2.516", "Checkov by Prisma Cloud 3.2.517", "Checkov by Prisma Cloud 3.2.518", "Checkov by Prisma Cloud 3.2.519", "Checkov by Prisma Cloud 3.2.520", "Checkov by Prisma Cloud 3.2.521", "Checkov by Prisma Cloud 3.2.522", "Checkov by Prisma Cloud 3.2.523", "Checkov by Prisma Cloud 3.2.524", "Checkov by Prisma Cloud 3.2.525", "Checkov by Prisma Cloud 3.2.526", "Checkov by Prisma Cloud 3.2.527", "Checkov by Prisma Cloud 3.2.528", "Checkov by Prisma Cloud 3.2.529", "Checkov by Prisma Cloud 3.2.530", "Checkov by Prisma Cloud 3.2.531", "Checkov by Prisma Cloud 3.2.532"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0311", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-15T16:19:42.105391Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T16:43:45.351Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0311", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "state": "PUBLISHED", "assignerShortName": "palo_alto", "dateReserved": "2025-11-03T20:45:09.854Z", "datePublished": "2026-10-14T20:29:19.297Z", "dateUpdated": "2026-10-15T16:43:45.351Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-10-14T20:29:19.297Z"}, "title": "Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability", "datePublic": "2026-10-14T16:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-664", "descriptions": [{"lang": "en", "value": "CAPEC-664 Server Side Request Forgery"}]}], "affected": [{"vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "versions": [{"status": "affected", "version": "0", "lessThan": "3.2.533", "changes": [{"at": "3.2.533", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.2.0", "versionEndExcluding": "3.2.533"}]}]}], "descriptions": [{"lang": "en", "value": "A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p><span>A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.</span><br></p>"}]}], "references": [{"url": "https://security.paloaltonetworks.com/CVE-2026-0311", "name": "Checkov Security Advisory", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "PASSIVE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NO", "Recovery": "USER", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "MODERATE", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "LOW", "baseScore": 1.1, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}], "configurations": [{"lang": "en", "value": "No special configuration is required.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No special configuration is required.&nbsp;<br></p>"}]}], "workarounds": [{"lang": "eng", "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."}]}], "solutions": [{"lang": "eng", "value": "Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud3.2.0 through 3.2.532Upgrade to\u00a03.2.533\u00a0or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<table><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr><td>Checkov by Prisma Cloud</td><td><span>3.2.0 through 3.2.532</span></td><td>Upgrade to&nbsp;3.2.533&nbsp;or later.</td></tr></tbody></table><br>Checkov integration in Prisma Cloud is upgraded automatically when new versions become available."}]}], "exploits": [{"lang": "en", "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."}]}], "timeline": [{"time": "2026-10-14T16:00:00.000Z", "lang": "en", "value": "Initial Publication."}], "credits": [{"lang": "en", "value": "Muhammad Ibrahim", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "x_affectedList": ["Checkov by Prisma Cloud 3.2.0", "Checkov by Prisma Cloud 3.2.1", "Checkov by Prisma Cloud 3.2.2", "Checkov by Prisma Cloud 3.2.3", "Checkov by Prisma Cloud 3.2.4", "Checkov by Prisma Cloud 3.2.5", "Checkov by Prisma Cloud 3.2.6", "Checkov by Prisma Cloud 3.2.7", "Checkov by Prisma Cloud 3.2.8", "Checkov by Prisma Cloud 3.2.9", "Checkov by Prisma Cloud 3.2.10", "Checkov by Prisma Cloud 3.2.11", "Checkov by Prisma Cloud 3.2.12", "Checkov by Prisma Cloud 3.2.13", "Checkov by Prisma Cloud 3.2.14", "Checkov by Prisma Cloud 3.2.15", "Checkov by Prisma Cloud 3.2.16", "Checkov by Prisma Cloud 3.2.17", "Checkov by Prisma Cloud 3.2.18", "Checkov by Prisma Cloud 3.2.19", "Checkov by Prisma Cloud 3.2.20", "Checkov by Prisma Cloud 3.2.21", "Checkov by Prisma Cloud 3.2.22", "Checkov by Prisma Cloud 3.2.23", "Checkov by Prisma Cloud 3.2.24", "Checkov by Prisma Cloud 3.2.25", "Checkov by Prisma Cloud 3.2.26", "Checkov by Prisma Cloud 3.2.27", "Checkov by Prisma Cloud 3.2.28", "Checkov by Prisma Cloud 3.2.29", "Checkov by Prisma Cloud 3.2.30", "Checkov by Prisma Cloud 3.2.31", "Checkov by Prisma Cloud 3.2.32", "Checkov by Prisma Cloud 3.2.33", "Checkov by Prisma Cloud 3.2.34", "Checkov by Prisma Cloud 3.2.35", "Checkov by Prisma Cloud 3.2.36", "Checkov by Prisma Cloud 3.2.37", "Checkov by Prisma Cloud 3.2.38", "Checkov by Prisma Cloud 3.2.39", "Checkov by Prisma Cloud 3.2.40", "Checkov by Prisma Cloud 3.2.41", "Checkov by Prisma Cloud 3.2.42", "Checkov by Prisma Cloud 3.2.43", "Checkov by Prisma Cloud 3.2.44", "Checkov by Prisma Cloud 3.2.45", "Checkov by Prisma Cloud 3.2.46", "Checkov by Prisma Cloud 3.2.47", "Checkov by Prisma Cloud 3.2.48", "Checkov by Prisma Cloud 3.2.49", "Checkov by Prisma Cloud 3.2.50", "Checkov by Prisma Cloud 3.2.51", "Checkov by Prisma Cloud 3.2.52", "Checkov by Prisma Cloud 3.2.53", "Checkov by Prisma Cloud 3.2.54", "Checkov by Prisma Cloud 3.2.55", "Checkov by Prisma Cloud 3.2.56", "Checkov by Prisma Cloud 3.2.57", "Checkov by Prisma Cloud 3.2.58", "Checkov by Prisma Cloud 3.2.59", "Checkov by Prisma Cloud 3.2.60", "Checkov by Prisma Cloud 3.2.61", "Checkov by Prisma Cloud 3.2.62", "Checkov by Prisma Cloud 3.2.63", "Checkov by Prisma Cloud 3.2.64", "Checkov by Prisma Cloud 3.2.65", "Checkov by Prisma Cloud 3.2.66", "Checkov by Prisma Cloud 3.2.67", "Checkov by Prisma Cloud 3.2.68", "Checkov by Prisma Cloud 3.2.69", "Checkov by Prisma Cloud 3.2.70", "Checkov by Prisma Cloud 3.2.71", "Checkov by Prisma Cloud 3.2.72", "Checkov by Prisma Cloud 3.2.73", "Checkov by Prisma Cloud 3.2.74", "Checkov by Prisma Cloud 3.2.75", "Checkov by Prisma Cloud 3.2.76", "Checkov by Prisma Cloud 3.2.77", "Checkov by Prisma Cloud 3.2.78", "Checkov by Prisma Cloud 3.2.79", "Checkov by Prisma Cloud 3.2.80", "Checkov by Prisma Cloud 3.2.81", "Checkov by Prisma Cloud 3.2.82", "Checkov by Prisma Cloud 3.2.83", "Checkov by Prisma Cloud 3.2.84", "Checkov by Prisma Cloud 3.2.85", "Checkov by Prisma Cloud 3.2.86", "Checkov by Prisma Cloud 3.2.87", "Checkov by Prisma Cloud 3.2.88", "Checkov by Prisma Cloud 3.2.89", "Checkov by Prisma Cloud 3.2.90", "Checkov by Prisma Cloud 3.2.91", "Checkov by Prisma Cloud 3.2.92", "Checkov by Prisma Cloud 3.2.93", "Checkov by Prisma Cloud 3.2.94", "Checkov by Prisma Cloud 3.2.95", "Checkov by Prisma Cloud 3.2.96", "Checkov by Prisma Cloud 3.2.97", "Checkov by Prisma Cloud 3.2.98", "Checkov by Prisma Cloud 3.2.99", "Checkov by Prisma Cloud 3.2.100", "Checkov by Prisma Cloud 3.2.101", "Checkov by Prisma Cloud 3.2.102", "Checkov by Prisma Cloud 3.2.103", "Checkov by Prisma Cloud 3.2.104", "Checkov by Prisma Cloud 3.2.105", "Checkov by Prisma Cloud 3.2.106", "Checkov by Prisma Cloud 3.2.107", "Checkov by Prisma Cloud 3.2.108", "Checkov by Prisma Cloud 3.2.109", "Checkov by Prisma Cloud 3.2.110", "Checkov by Prisma Cloud 3.2.111", "Checkov by Prisma Cloud 3.2.112", "Checkov by Prisma Cloud 3.2.113", "Checkov by Prisma Cloud 3.2.114", "Checkov by Prisma Cloud 3.2.115", "Checkov by Prisma Cloud 3.2.116", "Checkov by Prisma Cloud 3.2.117", "Checkov by Prisma Cloud 3.2.118", "Checkov by Prisma Cloud 3.2.119", "Checkov by Prisma Cloud 3.2.120", "Checkov by Prisma Cloud 3.2.121", "Checkov by Prisma Cloud 3.2.122", "Checkov by Prisma Cloud 3.2.123", "Checkov by Prisma Cloud 3.2.124", "Checkov by Prisma Cloud 3.2.125", "Checkov by Prisma Cloud 3.2.126", "Checkov by Prisma Cloud 3.2.127", "Checkov by Prisma Cloud 3.2.128", "Checkov by Prisma Cloud 3.2.129", "Checkov by Prisma Cloud 3.2.130", "Checkov by Prisma Cloud 3.2.131", "Checkov by Prisma Cloud 3.2.132", "Checkov by Prisma Cloud 3.2.133", "Checkov by Prisma Cloud 3.2.134", "Checkov by Prisma Cloud 3.2.135", "Checkov by Prisma Cloud 3.2.136", "Checkov by Prisma Cloud 3.2.137", "Checkov by Prisma Cloud 3.2.138", "Checkov by Prisma Cloud 3.2.139", "Checkov by Prisma Cloud 3.2.140", "Checkov by Prisma Cloud 3.2.141", "Checkov by Prisma Cloud 3.2.142", "Checkov by Prisma Cloud 3.2.143", "Checkov by Prisma Cloud 3.2.144", "Checkov by Prisma Cloud 3.2.145", "Checkov by Prisma Cloud 3.2.146", "Checkov by Prisma Cloud 3.2.147", "Checkov by Prisma Cloud 3.2.148", "Checkov by Prisma Cloud 3.2.149", "Checkov by Prisma Cloud 3.2.150", "Checkov by Prisma Cloud 3.2.151", "Checkov by Prisma Cloud 3.2.152", "Checkov by Prisma Cloud 3.2.153", "Checkov by Prisma Cloud 3.2.154", "Checkov by Prisma Cloud 3.2.155", "Checkov by Prisma Cloud 3.2.156", "Checkov by Prisma Cloud 3.2.157", "Checkov by Prisma Cloud 3.2.158", "Checkov by Prisma Cloud 3.2.159", "Checkov by Prisma Cloud 3.2.160", "Checkov by Prisma Cloud 3.2.161", "Checkov by Prisma Cloud 3.2.162", "Checkov by Prisma Cloud 3.2.163", "Checkov by Prisma Cloud 3.2.164", "Checkov by Prisma Cloud 3.2.165", "Checkov by Prisma Cloud 3.2.166", "Checkov by Prisma Cloud 3.2.167", "Checkov by Prisma Cloud 3.2.168", "Checkov by Prisma Cloud 3.2.169", "Checkov by Prisma Cloud 3.2.170", "Checkov by Prisma Cloud 3.2.171", "Checkov by Prisma Cloud 3.2.172", "Checkov by Prisma Cloud 3.2.173", "Checkov by Prisma Cloud 3.2.174", "Checkov by Prisma Cloud 3.2.175", "Checkov by Prisma Cloud 3.2.176", "Checkov by Prisma Cloud 3.2.177", "Checkov by Prisma Cloud 3.2.178", "Checkov by Prisma Cloud 3.2.179", "Checkov by Prisma Cloud 3.2.180", "Checkov by Prisma Cloud 3.2.181", "Checkov by Prisma Cloud 3.2.182", "Checkov by Prisma Cloud 3.2.183", "Checkov by Prisma Cloud 3.2.184", "Checkov by Prisma Cloud 3.2.185", "Checkov by Prisma Cloud 3.2.186", "Checkov by Prisma Cloud 3.2.187", "Checkov by Prisma Cloud 3.2.188", "Checkov by Prisma Cloud 3.2.189", "Checkov by Prisma Cloud 3.2.190", "Checkov by Prisma Cloud 3.2.191", "Checkov by Prisma Cloud 3.2.192", "Checkov by Prisma Cloud 3.2.193", "Checkov by Prisma Cloud 3.2.194", "Checkov by Prisma Cloud 3.2.195", "Checkov by Prisma Cloud 3.2.196", "Checkov by Prisma Cloud 3.2.197", "Checkov by Prisma Cloud 3.2.198", "Checkov by Prisma Cloud 3.2.199", "Checkov by Prisma Cloud 3.2.200", "Checkov by Prisma Cloud 3.2.201", "Checkov by Prisma Cloud 3.2.202", "Checkov by Prisma Cloud 3.2.203", "Checkov by Prisma Cloud 3.2.204", "Checkov by Prisma Cloud 3.2.205", "Checkov by Prisma Cloud 3.2.206", "Checkov by Prisma Cloud 3.2.207", "Checkov by Prisma Cloud 3.2.208", "Checkov by Prisma Cloud 3.2.209", "Checkov by Prisma Cloud 3.2.210", "Checkov by Prisma Cloud 3.2.211", "Checkov by Prisma Cloud 3.2.212", "Checkov by Prisma Cloud 3.2.213", "Checkov by Prisma Cloud 3.2.214", "Checkov by Prisma Cloud 3.2.215", "Checkov by Prisma Cloud 3.2.216", "Checkov by Prisma Cloud 3.2.217", "Checkov by Prisma Cloud 3.2.218", "Checkov by Prisma Cloud 3.2.219", "Checkov by Prisma Cloud 3.2.220", "Checkov by Prisma Cloud 3.2.221", "Checkov by Prisma Cloud 3.2.222", "Checkov by Prisma Cloud 3.2.223", "Checkov by Prisma Cloud 3.2.224", "Checkov by Prisma Cloud 3.2.225", "Checkov by Prisma Cloud 3.2.226", "Checkov by Prisma Cloud 3.2.227", "Checkov by Prisma Cloud 3.2.228", "Checkov by Prisma Cloud 3.2.229", "Checkov by Prisma Cloud 3.2.230", "Checkov by Prisma Cloud 3.2.231", "Checkov by Prisma Cloud 3.2.232", "Checkov by Prisma Cloud 3.2.233", "Checkov by Prisma Cloud 3.2.234", "Checkov by Prisma Cloud 3.2.235", "Checkov by Prisma Cloud 3.2.236", "Checkov by Prisma Cloud 3.2.237", "Checkov by Prisma Cloud 3.2.238", "Checkov by Prisma Cloud 3.2.239", "Checkov by Prisma Cloud 3.2.240", "Checkov by Prisma Cloud 3.2.241", "Checkov by Prisma Cloud 3.2.242", "Checkov by Prisma Cloud 3.2.243", "Checkov by Prisma Cloud 3.2.244", "Checkov by Prisma Cloud 3.2.245", "Checkov by Prisma Cloud 3.2.246", "Checkov by Prisma Cloud 3.2.247", "Checkov by Prisma Cloud 3.2.248", "Checkov by Prisma Cloud 3.2.249", "Checkov by Prisma Cloud 3.2.250", "Checkov by Prisma Cloud 3.2.251", "Checkov by Prisma Cloud 3.2.252", "Checkov by Prisma Cloud 3.2.253", "Checkov by Prisma Cloud 3.2.254", "Checkov by Prisma Cloud 3.2.255", "Checkov by Prisma Cloud 3.2.256", "Checkov by Prisma Cloud 3.2.257", "Checkov by Prisma Cloud 3.2.258", "Checkov by Prisma Cloud 3.2.259", "Checkov by Prisma Cloud 3.2.260", "Checkov by Prisma Cloud 3.2.261", "Checkov by Prisma Cloud 3.2.262", "Checkov by Prisma Cloud 3.2.263", "Checkov by Prisma Cloud 3.2.264", "Checkov by Prisma Cloud 3.2.265", "Checkov by Prisma Cloud 3.2.266", "Checkov by Prisma Cloud 3.2.267", "Checkov by Prisma Cloud 3.2.268", "Checkov by Prisma Cloud 3.2.269", "Checkov by Prisma Cloud 3.2.270", "Checkov by Prisma Cloud 3.2.271", "Checkov by Prisma Cloud 3.2.272", "Checkov by Prisma Cloud 3.2.273", "Checkov by Prisma Cloud 3.2.274", "Checkov by Prisma Cloud 3.2.275", "Checkov by Prisma Cloud 3.2.276", "Checkov by Prisma Cloud 3.2.277", "Checkov by Prisma Cloud 3.2.278", "Checkov by Prisma Cloud 3.2.279", "Checkov by Prisma Cloud 3.2.280", "Checkov by Prisma Cloud 3.2.281", "Checkov by Prisma Cloud 3.2.282", "Checkov by Prisma Cloud 3.2.283", "Checkov by Prisma Cloud 3.2.284", "Checkov by Prisma Cloud 3.2.285", "Checkov by Prisma Cloud 3.2.286", "Checkov by Prisma Cloud 3.2.287", "Checkov by Prisma Cloud 3.2.288", "Checkov by Prisma Cloud 3.2.289", "Checkov by Prisma Cloud 3.2.290", "Checkov by Prisma Cloud 3.2.291", "Checkov by Prisma Cloud 3.2.292", "Checkov by Prisma Cloud 3.2.293", "Checkov by Prisma Cloud 3.2.294", "Checkov by Prisma Cloud 3.2.295", "Checkov by Prisma Cloud 3.2.296", "Checkov by Prisma Cloud 3.2.297", "Checkov by Prisma Cloud 3.2.298", "Checkov by Prisma Cloud 3.2.299", "Checkov by Prisma Cloud 3.2.300", "Checkov by Prisma Cloud 3.2.301", "Checkov by Prisma Cloud 3.2.302", "Checkov by Prisma Cloud 3.2.303", "Checkov by Prisma Cloud 3.2.304", "Checkov by Prisma Cloud 3.2.305", "Checkov by Prisma Cloud 3.2.306", "Checkov by Prisma Cloud 3.2.307", "Checkov by Prisma Cloud 3.2.308", "Checkov by Prisma Cloud 3.2.309", "Checkov by Prisma Cloud 3.2.310", "Checkov by Prisma Cloud 3.2.311", "Checkov by Prisma Cloud 3.2.312", "Checkov by Prisma Cloud 3.2.313", "Checkov by Prisma Cloud 3.2.314", "Checkov by Prisma Cloud 3.2.315", "Checkov by Prisma Cloud 3.2.316", "Checkov by Prisma Cloud 3.2.317", "Checkov by Prisma Cloud 3.2.318", "Checkov by Prisma Cloud 3.2.319", "Checkov by Prisma Cloud 3.2.320", "Checkov by Prisma Cloud 3.2.321", "Checkov by Prisma Cloud 3.2.322", "Checkov by Prisma Cloud 3.2.323", "Checkov by Prisma Cloud 3.2.324", "Checkov by Prisma Cloud 3.2.325", "Checkov by Prisma Cloud 3.2.326", "Checkov by Prisma Cloud 3.2.327", "Checkov by Prisma Cloud 3.2.328", "Checkov by Prisma Cloud 3.2.329", "Checkov by Prisma Cloud 3.2.330", "Checkov by Prisma Cloud 3.2.331", "Checkov by Prisma Cloud 3.2.332", "Checkov by Prisma Cloud 3.2.333", "Checkov by Prisma Cloud 3.2.334", "Checkov by Prisma Cloud 3.2.335", "Checkov by Prisma Cloud 3.2.336", "Checkov by Prisma Cloud 3.2.337", "Checkov by Prisma Cloud 3.2.338", "Checkov by Prisma Cloud 3.2.339", "Checkov by Prisma Cloud 3.2.340", "Checkov by Prisma Cloud 3.2.341", "Checkov by Prisma Cloud 3.2.342", "Checkov by Prisma Cloud 3.2.343", "Checkov by Prisma Cloud 3.2.344", "Checkov by Prisma Cloud 3.2.345", "Checkov by Prisma Cloud 3.2.346", "Checkov by Prisma Cloud 3.2.347", "Checkov by Prisma Cloud 3.2.348", "Checkov by Prisma Cloud 3.2.349", "Checkov by Prisma Cloud 3.2.350", "Checkov by Prisma Cloud 3.2.351", "Checkov by Prisma Cloud 3.2.352", "Checkov by Prisma Cloud 3.2.353", "Checkov by Prisma Cloud 3.2.354", "Checkov by Prisma Cloud 3.2.355", "Checkov by Prisma Cloud 3.2.356", "Checkov by Prisma Cloud 3.2.357", "Checkov by Prisma Cloud 3.2.358", "Checkov by Prisma Cloud 3.2.359", "Checkov by Prisma Cloud 3.2.360", "Checkov by Prisma Cloud 3.2.361", "Checkov by Prisma Cloud 3.2.362", "Checkov by Prisma Cloud 3.2.363", "Checkov by Prisma Cloud 3.2.364", "Checkov by Prisma Cloud 3.2.365", "Checkov by Prisma Cloud 3.2.366", "Checkov by Prisma Cloud 3.2.367", "Checkov by Prisma Cloud 3.2.368", "Checkov by Prisma Cloud 3.2.369", "Checkov by Prisma Cloud 3.2.370", "Checkov by Prisma Cloud 3.2.371", "Checkov by Prisma Cloud 3.2.372", "Checkov by Prisma Cloud 3.2.373", "Checkov by Prisma Cloud 3.2.374", "Checkov by Prisma Cloud 3.2.375", "Checkov by Prisma Cloud 3.2.376", "Checkov by Prisma Cloud 3.2.377", "Checkov by Prisma Cloud 3.2.378", "Checkov by Prisma Cloud 3.2.379", "Checkov by Prisma Cloud 3.2.380", "Checkov by Prisma Cloud 3.2.381", "Checkov by Prisma Cloud 3.2.382", "Checkov by Prisma Cloud 3.2.383", "Checkov by Prisma Cloud 3.2.384", "Checkov by Prisma Cloud 3.2.385", "Checkov by Prisma Cloud 3.2.386", "Checkov by Prisma Cloud 3.2.387", "Checkov by Prisma Cloud 3.2.388", "Checkov by Prisma Cloud 3.2.389", "Checkov by Prisma Cloud 3.2.390", "Checkov by Prisma Cloud 3.2.391", "Checkov by Prisma Cloud 3.2.392", "Checkov by Prisma Cloud 3.2.393", "Checkov by Prisma Cloud 3.2.394", "Checkov by Prisma Cloud 3.2.395", "Checkov by Prisma Cloud 3.2.396", "Checkov by Prisma Cloud 3.2.397", "Checkov by Prisma Cloud 3.2.398", "Checkov by Prisma Cloud 3.2.399", "Checkov by Prisma Cloud 3.2.400", "Checkov by Prisma Cloud 3.2.401", "Checkov by Prisma Cloud 3.2.402", "Checkov by Prisma Cloud 3.2.403", "Checkov by Prisma Cloud 3.2.404", "Checkov by Prisma Cloud 3.2.405", "Checkov by Prisma Cloud 3.2.406", "Checkov by Prisma Cloud 3.2.407", "Checkov by Prisma Cloud 3.2.408", "Checkov by Prisma Cloud 3.2.409", "Checkov by Prisma Cloud 3.2.410", "Checkov by Prisma Cloud 3.2.411", "Checkov by Prisma Cloud 3.2.412", "Checkov by Prisma Cloud 3.2.413", "Checkov by Prisma Cloud 3.2.414", "Checkov by Prisma Cloud 3.2.415", "Checkov by Prisma Cloud 3.2.416", "Checkov by Prisma Cloud 3.2.417", "Checkov by Prisma Cloud 3.2.418", "Checkov by Prisma Cloud 3.2.419", "Checkov by Prisma Cloud 3.2.420", "Checkov by Prisma Cloud 3.2.421", "Checkov by Prisma Cloud 3.2.422", "Checkov by Prisma Cloud 3.2.423", "Checkov by Prisma Cloud 3.2.424", "Checkov by Prisma Cloud 3.2.425", "Checkov by Prisma Cloud 3.2.426", "Checkov by Prisma Cloud 3.2.427", "Checkov by Prisma Cloud 3.2.428", "Checkov by Prisma Cloud 3.2.429", "Checkov by Prisma Cloud 3.2.430", "Checkov by Prisma Cloud 3.2.431", "Checkov by Prisma Cloud 3.2.432", "Checkov by Prisma Cloud 3.2.433", "Checkov by Prisma Cloud 3.2.434", "Checkov by Prisma Cloud 3.2.435", "Checkov by Prisma Cloud 3.2.436", "Checkov by Prisma Cloud 3.2.437", "Checkov by Prisma Cloud 3.2.438", "Checkov by Prisma Cloud 3.2.439", "Checkov by Prisma Cloud 3.2.440", "Checkov by Prisma Cloud 3.2.441", "Checkov by Prisma Cloud 3.2.442", "Checkov by Prisma Cloud 3.2.443", "Checkov by Prisma Cloud 3.2.444", "Checkov by Prisma Cloud 3.2.445", "Checkov by Prisma Cloud 3.2.446", "Checkov by Prisma Cloud 3.2.447", "Checkov by Prisma Cloud 3.2.448", "Checkov by Prisma Cloud 3.2.449", "Checkov by Prisma Cloud 3.2.450", "Checkov by Prisma Cloud 3.2.451", "Checkov by Prisma Cloud 3.2.452", "Checkov by Prisma Cloud 3.2.453", "Checkov by Prisma Cloud 3.2.454", "Checkov by Prisma Cloud 3.2.455", "Checkov by Prisma Cloud 3.2.456", "Checkov by Prisma Cloud 3.2.457", "Checkov by Prisma Cloud 3.2.458", "Checkov by Prisma Cloud 3.2.459", "Checkov by Prisma Cloud 3.2.460", "Checkov by Prisma Cloud 3.2.461", "Checkov by Prisma Cloud 3.2.462", "Checkov by Prisma Cloud 3.2.463", "Checkov by Prisma Cloud 3.2.464", "Checkov by Prisma Cloud 3.2.465", "Checkov by Prisma Cloud 3.2.466", "Checkov by Prisma Cloud 3.2.467", "Checkov by Prisma Cloud 3.2.468", "Checkov by Prisma Cloud 3.2.469", "Checkov by Prisma Cloud 3.2.470", "Checkov by Prisma Cloud 3.2.471", "Checkov by Prisma Cloud 3.2.472", "Checkov by Prisma Cloud 3.2.473", "Checkov by Prisma Cloud 3.2.474", "Checkov by Prisma Cloud 3.2.475", "Checkov by Prisma Cloud 3.2.476", "Checkov by Prisma Cloud 3.2.477", "Checkov by Prisma Cloud 3.2.478", "Checkov by Prisma Cloud 3.2.479", "Checkov by Prisma Cloud 3.2.480", "Checkov by Prisma Cloud 3.2.481", "Checkov by Prisma Cloud 3.2.482", "Checkov by Prisma Cloud 3.2.483", "Checkov by Prisma Cloud 3.2.484", "Checkov by Prisma Cloud 3.2.485", "Checkov by Prisma Cloud 3.2.486", "Checkov by Prisma Cloud 3.2.487", "Checkov by Prisma Cloud 3.2.488", "Checkov by Prisma Cloud 3.2.489", "Checkov by Prisma Cloud 3.2.490", "Checkov by Prisma Cloud 3.2.491", "Checkov by Prisma Cloud 3.2.492", "Checkov by Prisma Cloud 3.2.493", "Checkov by Prisma Cloud 3.2.494", "Checkov by Prisma Cloud 3.2.495", "Checkov by Prisma Cloud 3.2.496", "Checkov by Prisma Cloud 3.2.497", "Checkov by Prisma Cloud 3.2.498", "Checkov by Prisma Cloud 3.2.499", "Checkov by Prisma Cloud 3.2.500", "Checkov by Prisma Cloud 3.2.501", "Checkov by Prisma Cloud 3.2.502", "Checkov by Prisma Cloud 3.2.503", "Checkov by Prisma Cloud 3.2.504", "Checkov by Prisma Cloud 3.2.505", "Checkov by Prisma Cloud 3.2.506", "Checkov by Prisma Cloud 3.2.507", "Checkov by Prisma Cloud 3.2.508", "Checkov by Prisma Cloud 3.2.509", "Checkov by Prisma Cloud 3.2.510", "Checkov by Prisma Cloud 3.2.511", "Checkov by Prisma Cloud 3.2.512", "Checkov by Prisma Cloud 3.2.513", "Checkov by Prisma Cloud 3.2.514", "Checkov by Prisma Cloud 3.2.515", "Checkov by Prisma Cloud 3.2.516", "Checkov by Prisma Cloud 3.2.517", "Checkov by Prisma Cloud 3.2.518", "Checkov by Prisma Cloud 3.2.519", "Checkov by Prisma Cloud 3.2.520", "Checkov by Prisma Cloud 3.2.521", "Checkov by Prisma Cloud 3.2.522", "Checkov by Prisma Cloud 3.2.523", "Checkov by Prisma Cloud 3.2.524", "Checkov by Prisma Cloud 3.2.525", "Checkov by Prisma Cloud 3.2.526", "Checkov by Prisma Cloud 3.2.527", "Checkov by Prisma Cloud 3.2.528", "Checkov by Prisma Cloud 3.2.529", "Checkov by Prisma Cloud 3.2.530", "Checkov by Prisma Cloud 3.2.531", "Checkov by Prisma Cloud 3.2.532"]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0311", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-15T16:19:42.105391Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T16:38:25.884Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Checkov by Prisma Cloud", "vendor": "Palo Alto Networks", "versions": [{"changes": [{"at": "3.2.533", "status": "unaffected"}], "lessThan": "3.2.533", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "psirt@paloaltonetworks.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma\u00ae Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services."}], "id": "CVE-2026-0311", "lastModified": "2026-10-15T20:38:04.303", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NO", "Recovery": "USER", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "PASSIVE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "MODERATE"}, "source": "psirt@paloaltonetworks.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0311", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-15T16:19:42.105391Z", "version": "2.0.3"}}]}, "published": "2026-10-14T21:17:17.687", "references": [{"source": "psirt@paloaltonetworks.com", "url": "https://security.paloaltonetworks.com/CVE-2026-0311"}], "sourceIdentifier": "psirt@paloaltonetworks.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "psirt@paloaltonetworks.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.2.533)"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Checkov by Prisma Cloud", "source": "cna", "vendor": "Palo Alto Networks"}, "product": "checkov_by_prisma_cloud", "vendor": "palo_alto_networks"}], "created": "2026-10-15T13:30:02.312941+00:00", "updated": "2026-10-16T20:15:13.698455+00:00", "vendors": ["palo_alto_networks", "palo_alto_networks$PRODUCT$checkov_by_prisma_cloud"]}