---
id: CVE-2026-0311
title: >-
  A server-side request forgery vulnerability in Palo Alto Networks Checkov by
  Prisma® Cloud enables a local unauthenticated user to make unauthorized
  network requests from host to internal services.
summary: >-
  A server-side request forgery vulnerability in Palo Alto Networks Checkov by
  Prisma® Cloud enables a local unauthenticated user to make unauthorized
  network requests from host to internal services.
severity: low
cwe:
  - CWE-918
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T21:17:17.687'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-0311'
references:
  - url: 'https://security.paloaltonetworks.com/CVE-2026-0311'
    label: psirt@paloaltonetworks.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-14T21:57:04.814Z'
vendor: Palo Alto Networks
product: Checkov by Prisma Cloud
affected:
  - checkov_by_prisma_cloud < 3.2.533
cvss: 1.1
cvssVector: >-
  CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
cvssSource: cna
---

## Overview

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.