{"api_version":"1","generated_at":"2026-10-26T17:27:00+00:00","cve":"CVE-2026-0311","urls":{"html":"https://cve.report/CVE-2026-0311","api":"https://cve.report/api/cve/CVE-2026-0311.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-0311","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-0311"},"summary":{"title":"Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability","description":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","state":"PUBLISHED","assigner":"palo_alto","published_at":"2026-10-14 21:17:17","updated_at":"2026-10-15 20:38:04"},"problem_types":["CWE-918","CWE-918 CWE-918 Server-Side Request Forgery (SSRF)"],"metrics":[{"version":"4.0","source":"psirt@paloaltonetworks.com","type":"Secondary","score":"1.1","severity":"LOW","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","baseScore":1.1,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER"}},{"version":"4.0","source":"CNA","type":"CVSS","score":"1.1","severity":"LOW","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","data":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":1.1,"baseSeverity":"LOW","exploitMaturity":"UNREPORTED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"}}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0311","name":"https://security.paloaltonetworks.com/CVE-2026-0311","refsource":"psirt@paloaltonetworks.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-0311","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0311","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Palo Alto Networks","product":"Checkov by Prisma Cloud","version":"affected 3.2.533 custom","platforms":[]}],"timeline":[{"source":"CNA","time":"2026-10-14T16:00:00.000Z","lang":"en","value":"Initial Publication."}],"solutions":[{"source":"CNA","title":"","value":"Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud3.2.0 through 3.2.532Upgrade to 3.2.533 or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available.","time":"","lang":"eng"}],"workarounds":[{"source":"CNA","title":"","value":"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory.","time":"","lang":"eng"}],"exploits":[{"source":"CNA","title":"","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue.","time":"","lang":"en"}],"credits":[{"source":"CNA","value":"Muhammad Ibrahim","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"311","cve":"CVE-2026-0311","epss":"0.001070000","percentile":"0.010970000","score_date":"2026-10-15","updated_at":"2026-10-16 00:06:12"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-0311","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-10-15T16:19:42.105391Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-10-15T16:43:45.351Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"Checkov by Prisma Cloud","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"3.2.533","status":"unaffected"}],"lessThan":"3.2.533","status":"affected","version":"0","versionType":"custom"}]}],"configurations":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

No special configuration is required. 

"}],"value":"No special configuration is required."}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.533","versionStartIncluding":"3.2.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"Muhammad Ibrahim"}],"datePublic":"2026-10-14T16:00:00.000Z","descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.

"}],"value":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services."}],"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"impacts":[{"capecId":"CAPEC-664","descriptions":[{"lang":"en","value":"CAPEC-664 Server Side Request Forgery"}]}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":1.1,"baseSeverity":"LOW","exploitMaturity":"UNREPORTED","privilegesRequired":"NONE","providerUrgency":"AMBER","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"PASSIVE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"MODERATE"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-918","description":"CWE-918 Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-14T20:29:19.297Z","orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","shortName":"palo_alto"},"references":[{"name":"Checkov Security Advisory","tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0311"}],"solutions":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"
Version
Minor Version
Suggested Solution
Checkov by Prisma Cloud3.2.0 through 3.2.532Upgrade to 3.2.533 or later.

Checkov integration in Prisma Cloud is upgraded automatically when new versions become available."}],"value":"Version\nMinor Version\nSuggested Solution\nCheckov by Prisma Cloud3.2.0 through 3.2.532Upgrade to 3.2.533 or later.\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."}],"source":{"discovery":"EXTERNAL"},"timeline":[{"lang":"en","time":"2026-10-14T16:00:00.000Z","value":"Initial Publication."}],"title":"Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability","workarounds":[{"lang":"eng","supportingMedia":[{"base64":false,"type":"text/html","value":"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."}],"value":"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."}],"x_affectedList":["Checkov by Prisma Cloud 3.2.0","Checkov by Prisma Cloud 3.2.1","Checkov by Prisma Cloud 3.2.2","Checkov by Prisma Cloud 3.2.3","Checkov by Prisma Cloud 3.2.4","Checkov by Prisma Cloud 3.2.5","Checkov by Prisma Cloud 3.2.6","Checkov by Prisma Cloud 3.2.7","Checkov by Prisma Cloud 3.2.8","Checkov by Prisma Cloud 3.2.9","Checkov by Prisma Cloud 3.2.10","Checkov by Prisma Cloud 3.2.11","Checkov by Prisma Cloud 3.2.12","Checkov by Prisma Cloud 3.2.13","Checkov by Prisma Cloud 3.2.14","Checkov by Prisma Cloud 3.2.15","Checkov by Prisma Cloud 3.2.16","Checkov by Prisma Cloud 3.2.17","Checkov by Prisma Cloud 3.2.18","Checkov by Prisma Cloud 3.2.19","Checkov by Prisma Cloud 3.2.20","Checkov by Prisma Cloud 3.2.21","Checkov by Prisma Cloud 3.2.22","Checkov by Prisma Cloud 3.2.23","Checkov by Prisma Cloud 3.2.24","Checkov by Prisma Cloud 3.2.25","Checkov by Prisma Cloud 3.2.26","Checkov by Prisma Cloud 3.2.27","Checkov by Prisma Cloud 3.2.28","Checkov by Prisma Cloud 3.2.29","Checkov by Prisma Cloud 3.2.30","Checkov by Prisma Cloud 3.2.31","Checkov by Prisma Cloud 3.2.32","Checkov by Prisma Cloud 3.2.33","Checkov by Prisma Cloud 3.2.34","Checkov by Prisma Cloud 3.2.35","Checkov by Prisma Cloud 3.2.36","Checkov by Prisma Cloud 3.2.37","Checkov by Prisma Cloud 3.2.38","Checkov by Prisma Cloud 3.2.39","Checkov by Prisma Cloud 3.2.40","Checkov by Prisma Cloud 3.2.41","Checkov by Prisma Cloud 3.2.42","Checkov by Prisma Cloud 3.2.43","Checkov by Prisma Cloud 3.2.44","Checkov by Prisma Cloud 3.2.45","Checkov by Prisma Cloud 3.2.46","Checkov by Prisma Cloud 3.2.47","Checkov by Prisma Cloud 3.2.48","Checkov by Prisma Cloud 3.2.49","Checkov by Prisma Cloud 3.2.50","Checkov by Prisma Cloud 3.2.51","Checkov by Prisma Cloud 3.2.52","Checkov by Prisma Cloud 3.2.53","Checkov by Prisma Cloud 3.2.54","Checkov by Prisma Cloud 3.2.55","Checkov by Prisma Cloud 3.2.56","Checkov by Prisma Cloud 3.2.57","Checkov by Prisma Cloud 3.2.58","Checkov by Prisma Cloud 3.2.59","Checkov by Prisma Cloud 3.2.60","Checkov by Prisma Cloud 3.2.61","Checkov by Prisma Cloud 3.2.62","Checkov by Prisma Cloud 3.2.63","Checkov by Prisma Cloud 3.2.64","Checkov by Prisma Cloud 3.2.65","Checkov by Prisma Cloud 3.2.66","Checkov by Prisma Cloud 3.2.67","Checkov by Prisma Cloud 3.2.68","Checkov by Prisma Cloud 3.2.69","Checkov by Prisma Cloud 3.2.70","Checkov by Prisma Cloud 3.2.71","Checkov by Prisma Cloud 3.2.72","Checkov by Prisma Cloud 3.2.73","Checkov by Prisma Cloud 3.2.74","Checkov by Prisma Cloud 3.2.75","Checkov by Prisma Cloud 3.2.76","Checkov by Prisma Cloud 3.2.77","Checkov by Prisma Cloud 3.2.78","Checkov by Prisma Cloud 3.2.79","Checkov by Prisma Cloud 3.2.80","Checkov by Prisma Cloud 3.2.81","Checkov by Prisma Cloud 3.2.82","Checkov by Prisma Cloud 3.2.83","Checkov by Prisma Cloud 3.2.84","Checkov by Prisma Cloud 3.2.85","Checkov by Prisma Cloud 3.2.86","Checkov by Prisma Cloud 3.2.87","Checkov by Prisma Cloud 3.2.88","Checkov by Prisma Cloud 3.2.89","Checkov by Prisma Cloud 3.2.90","Checkov by Prisma Cloud 3.2.91","Checkov by Prisma Cloud 3.2.92","Checkov by Prisma Cloud 3.2.93","Checkov by Prisma Cloud 3.2.94","Checkov by Prisma Cloud 3.2.95","Checkov by Prisma Cloud 3.2.96","Checkov by Prisma Cloud 3.2.97","Checkov by Prisma Cloud 3.2.98","Checkov by Prisma Cloud 3.2.99","Checkov by Prisma Cloud 3.2.100","Checkov by Prisma Cloud 3.2.101","Checkov by Prisma Cloud 3.2.102","Checkov by Prisma Cloud 3.2.103","Checkov by Prisma Cloud 3.2.104","Checkov by Prisma Cloud 3.2.105","Checkov by Prisma Cloud 3.2.106","Checkov by Prisma Cloud 3.2.107","Checkov by Prisma Cloud 3.2.108","Checkov by Prisma Cloud 3.2.109","Checkov by Prisma Cloud 3.2.110","Checkov by Prisma Cloud 3.2.111","Checkov by Prisma Cloud 3.2.112","Checkov by Prisma Cloud 3.2.113","Checkov by Prisma Cloud 3.2.114","Checkov by Prisma Cloud 3.2.115","Checkov by Prisma Cloud 3.2.116","Checkov by Prisma Cloud 3.2.117","Checkov by Prisma Cloud 3.2.118","Checkov by Prisma Cloud 3.2.119","Checkov by Prisma Cloud 3.2.120","Checkov by Prisma Cloud 3.2.121","Checkov by Prisma Cloud 3.2.122","Checkov by Prisma Cloud 3.2.123","Checkov by Prisma Cloud 3.2.124","Checkov by Prisma Cloud 3.2.125","Checkov by Prisma Cloud 3.2.126","Checkov by Prisma Cloud 3.2.127","Checkov by Prisma Cloud 3.2.128","Checkov by Prisma Cloud 3.2.129","Checkov by Prisma Cloud 3.2.130","Checkov by Prisma Cloud 3.2.131","Checkov by Prisma Cloud 3.2.132","Checkov by Prisma Cloud 3.2.133","Checkov by Prisma Cloud 3.2.134","Checkov by Prisma Cloud 3.2.135","Checkov by Prisma Cloud 3.2.136","Checkov by Prisma Cloud 3.2.137","Checkov by Prisma Cloud 3.2.138","Checkov by Prisma Cloud 3.2.139","Checkov by Prisma Cloud 3.2.140","Checkov by Prisma Cloud 3.2.141","Checkov by Prisma Cloud 3.2.142","Checkov by Prisma Cloud 3.2.143","Checkov by Prisma Cloud 3.2.144","Checkov by Prisma Cloud 3.2.145","Checkov by Prisma Cloud 3.2.146","Checkov by Prisma Cloud 3.2.147","Checkov by Prisma Cloud 3.2.148","Checkov by Prisma Cloud 3.2.149","Checkov by Prisma Cloud 3.2.150","Checkov by Prisma Cloud 3.2.151","Checkov by Prisma Cloud 3.2.152","Checkov by Prisma Cloud 3.2.153","Checkov by Prisma Cloud 3.2.154","Checkov by Prisma Cloud 3.2.155","Checkov by Prisma Cloud 3.2.156","Checkov by Prisma Cloud 3.2.157","Checkov by Prisma Cloud 3.2.158","Checkov by Prisma Cloud 3.2.159","Checkov by Prisma Cloud 3.2.160","Checkov by Prisma Cloud 3.2.161","Checkov by Prisma Cloud 3.2.162","Checkov by Prisma Cloud 3.2.163","Checkov by Prisma Cloud 3.2.164","Checkov by Prisma Cloud 3.2.165","Checkov by Prisma Cloud 3.2.166","Checkov by Prisma Cloud 3.2.167","Checkov by Prisma Cloud 3.2.168","Checkov by Prisma Cloud 3.2.169","Checkov by Prisma Cloud 3.2.170","Checkov by Prisma Cloud 3.2.171","Checkov by Prisma Cloud 3.2.172","Checkov by Prisma Cloud 3.2.173","Checkov by Prisma Cloud 3.2.174","Checkov by Prisma Cloud 3.2.175","Checkov by Prisma Cloud 3.2.176","Checkov by Prisma Cloud 3.2.177","Checkov by Prisma Cloud 3.2.178","Checkov by Prisma Cloud 3.2.179","Checkov by Prisma Cloud 3.2.180","Checkov by Prisma Cloud 3.2.181","Checkov by Prisma Cloud 3.2.182","Checkov by Prisma Cloud 3.2.183","Checkov by Prisma Cloud 3.2.184","Checkov by Prisma Cloud 3.2.185","Checkov by Prisma Cloud 3.2.186","Checkov by Prisma Cloud 3.2.187","Checkov by Prisma Cloud 3.2.188","Checkov by Prisma Cloud 3.2.189","Checkov by Prisma Cloud 3.2.190","Checkov by Prisma Cloud 3.2.191","Checkov by Prisma Cloud 3.2.192","Checkov by Prisma Cloud 3.2.193","Checkov by Prisma Cloud 3.2.194","Checkov by Prisma Cloud 3.2.195","Checkov by Prisma Cloud 3.2.196","Checkov by Prisma Cloud 3.2.197","Checkov by Prisma Cloud 3.2.198","Checkov by Prisma Cloud 3.2.199","Checkov by Prisma Cloud 3.2.200","Checkov by Prisma Cloud 3.2.201","Checkov by Prisma Cloud 3.2.202","Checkov by Prisma Cloud 3.2.203","Checkov by Prisma Cloud 3.2.204","Checkov by Prisma Cloud 3.2.205","Checkov by Prisma Cloud 3.2.206","Checkov by Prisma Cloud 3.2.207","Checkov by Prisma Cloud 3.2.208","Checkov by Prisma Cloud 3.2.209","Checkov by Prisma Cloud 3.2.210","Checkov by Prisma Cloud 3.2.211","Checkov by Prisma Cloud 3.2.212","Checkov by Prisma Cloud 3.2.213","Checkov by Prisma Cloud 3.2.214","Checkov by Prisma Cloud 3.2.215","Checkov by Prisma Cloud 3.2.216","Checkov by Prisma Cloud 3.2.217","Checkov by Prisma Cloud 3.2.218","Checkov by Prisma Cloud 3.2.219","Checkov by Prisma Cloud 3.2.220","Checkov by Prisma Cloud 3.2.221","Checkov by Prisma Cloud 3.2.222","Checkov by Prisma Cloud 3.2.223","Checkov by Prisma Cloud 3.2.224","Checkov by Prisma Cloud 3.2.225","Checkov by Prisma Cloud 3.2.226","Checkov by Prisma Cloud 3.2.227","Checkov by Prisma Cloud 3.2.228","Checkov by Prisma Cloud 3.2.229","Checkov by Prisma Cloud 3.2.230","Checkov by Prisma Cloud 3.2.231","Checkov by Prisma Cloud 3.2.232","Checkov by Prisma Cloud 3.2.233","Checkov by Prisma Cloud 3.2.234","Checkov by Prisma Cloud 3.2.235","Checkov by Prisma Cloud 3.2.236","Checkov by Prisma Cloud 3.2.237","Checkov by Prisma Cloud 3.2.238","Checkov by Prisma Cloud 3.2.239","Checkov by Prisma Cloud 3.2.240","Checkov by Prisma Cloud 3.2.241","Checkov by Prisma Cloud 3.2.242","Checkov by Prisma Cloud 3.2.243","Checkov by Prisma Cloud 3.2.244","Checkov by Prisma Cloud 3.2.245","Checkov by Prisma Cloud 3.2.246","Checkov by Prisma Cloud 3.2.247","Checkov by Prisma Cloud 3.2.248","Checkov by Prisma Cloud 3.2.249","Checkov by Prisma Cloud 3.2.250","Checkov by Prisma Cloud 3.2.251","Checkov by Prisma Cloud 3.2.252","Checkov by Prisma Cloud 3.2.253","Checkov by Prisma Cloud 3.2.254","Checkov by Prisma Cloud 3.2.255","Checkov by Prisma Cloud 3.2.256","Checkov by Prisma Cloud 3.2.257","Checkov by Prisma Cloud 3.2.258","Checkov by Prisma Cloud 3.2.259","Checkov by Prisma Cloud 3.2.260","Checkov by Prisma Cloud 3.2.261","Checkov by Prisma Cloud 3.2.262","Checkov by Prisma Cloud 3.2.263","Checkov by Prisma Cloud 3.2.264","Checkov by Prisma Cloud 3.2.265","Checkov by Prisma Cloud 3.2.266","Checkov by Prisma Cloud 3.2.267","Checkov by Prisma Cloud 3.2.268","Checkov by Prisma Cloud 3.2.269","Checkov by Prisma Cloud 3.2.270","Checkov by Prisma Cloud 3.2.271","Checkov by Prisma Cloud 3.2.272","Checkov by Prisma Cloud 3.2.273","Checkov by Prisma Cloud 3.2.274","Checkov by Prisma Cloud 3.2.275","Checkov by Prisma Cloud 3.2.276","Checkov by Prisma Cloud 3.2.277","Checkov by Prisma Cloud 3.2.278","Checkov by Prisma Cloud 3.2.279","Checkov by Prisma Cloud 3.2.280","Checkov by Prisma Cloud 3.2.281","Checkov by Prisma Cloud 3.2.282","Checkov by Prisma Cloud 3.2.283","Checkov by Prisma Cloud 3.2.284","Checkov by Prisma Cloud 3.2.285","Checkov by Prisma Cloud 3.2.286","Checkov by Prisma Cloud 3.2.287","Checkov by Prisma Cloud 3.2.288","Checkov by Prisma Cloud 3.2.289","Checkov by Prisma Cloud 3.2.290","Checkov by Prisma Cloud 3.2.291","Checkov by Prisma Cloud 3.2.292","Checkov by Prisma Cloud 3.2.293","Checkov by Prisma Cloud 3.2.294","Checkov by Prisma Cloud 3.2.295","Checkov by Prisma Cloud 3.2.296","Checkov by Prisma Cloud 3.2.297","Checkov by Prisma Cloud 3.2.298","Checkov by Prisma Cloud 3.2.299","Checkov by Prisma Cloud 3.2.300","Checkov by Prisma Cloud 3.2.301","Checkov by Prisma Cloud 3.2.302","Checkov by Prisma Cloud 3.2.303","Checkov by Prisma Cloud 3.2.304","Checkov by Prisma Cloud 3.2.305","Checkov by Prisma Cloud 3.2.306","Checkov by Prisma Cloud 3.2.307","Checkov by Prisma Cloud 3.2.308","Checkov by Prisma Cloud 3.2.309","Checkov by Prisma Cloud 3.2.310","Checkov by Prisma Cloud 3.2.311","Checkov by Prisma Cloud 3.2.312","Checkov by Prisma Cloud 3.2.313","Checkov by Prisma Cloud 3.2.314","Checkov by Prisma Cloud 3.2.315","Checkov by Prisma Cloud 3.2.316","Checkov by Prisma Cloud 3.2.317","Checkov by Prisma Cloud 3.2.318","Checkov by Prisma Cloud 3.2.319","Checkov by Prisma Cloud 3.2.320","Checkov by Prisma Cloud 3.2.321","Checkov by Prisma Cloud 3.2.322","Checkov by Prisma Cloud 3.2.323","Checkov by Prisma Cloud 3.2.324","Checkov by Prisma Cloud 3.2.325","Checkov by Prisma Cloud 3.2.326","Checkov by Prisma Cloud 3.2.327","Checkov by Prisma Cloud 3.2.328","Checkov by Prisma Cloud 3.2.329","Checkov by Prisma Cloud 3.2.330","Checkov by Prisma Cloud 3.2.331","Checkov by Prisma Cloud 3.2.332","Checkov by Prisma Cloud 3.2.333","Checkov by Prisma Cloud 3.2.334","Checkov by Prisma Cloud 3.2.335","Checkov by Prisma Cloud 3.2.336","Checkov by Prisma Cloud 3.2.337","Checkov by Prisma Cloud 3.2.338","Checkov by Prisma Cloud 3.2.339","Checkov by Prisma Cloud 3.2.340","Checkov by Prisma Cloud 3.2.341","Checkov by Prisma Cloud 3.2.342","Checkov by Prisma Cloud 3.2.343","Checkov by Prisma Cloud 3.2.344","Checkov by Prisma Cloud 3.2.345","Checkov by Prisma Cloud 3.2.346","Checkov by Prisma Cloud 3.2.347","Checkov by Prisma Cloud 3.2.348","Checkov by Prisma Cloud 3.2.349","Checkov by Prisma Cloud 3.2.350","Checkov by Prisma Cloud 3.2.351","Checkov by Prisma Cloud 3.2.352","Checkov by Prisma Cloud 3.2.353","Checkov by Prisma Cloud 3.2.354","Checkov by Prisma Cloud 3.2.355","Checkov by Prisma Cloud 3.2.356","Checkov by Prisma Cloud 3.2.357","Checkov by Prisma Cloud 3.2.358","Checkov by Prisma Cloud 3.2.359","Checkov by Prisma Cloud 3.2.360","Checkov by Prisma Cloud 3.2.361","Checkov by Prisma Cloud 3.2.362","Checkov by Prisma Cloud 3.2.363","Checkov by Prisma Cloud 3.2.364","Checkov by Prisma Cloud 3.2.365","Checkov by Prisma Cloud 3.2.366","Checkov by Prisma Cloud 3.2.367","Checkov by Prisma Cloud 3.2.368","Checkov by Prisma Cloud 3.2.369","Checkov by Prisma Cloud 3.2.370","Checkov by Prisma Cloud 3.2.371","Checkov by Prisma Cloud 3.2.372","Checkov by Prisma Cloud 3.2.373","Checkov by Prisma Cloud 3.2.374","Checkov by Prisma Cloud 3.2.375","Checkov by Prisma Cloud 3.2.376","Checkov by Prisma Cloud 3.2.377","Checkov by Prisma Cloud 3.2.378","Checkov by Prisma Cloud 3.2.379","Checkov by Prisma Cloud 3.2.380","Checkov by Prisma Cloud 3.2.381","Checkov by Prisma Cloud 3.2.382","Checkov by Prisma Cloud 3.2.383","Checkov by Prisma Cloud 3.2.384","Checkov by Prisma Cloud 3.2.385","Checkov by Prisma Cloud 3.2.386","Checkov by Prisma Cloud 3.2.387","Checkov by Prisma Cloud 3.2.388","Checkov by Prisma Cloud 3.2.389","Checkov by Prisma Cloud 3.2.390","Checkov by Prisma Cloud 3.2.391","Checkov by Prisma Cloud 3.2.392","Checkov by Prisma Cloud 3.2.393","Checkov by Prisma Cloud 3.2.394","Checkov by Prisma Cloud 3.2.395","Checkov by Prisma Cloud 3.2.396","Checkov by Prisma Cloud 3.2.397","Checkov by Prisma Cloud 3.2.398","Checkov by Prisma Cloud 3.2.399","Checkov by Prisma Cloud 3.2.400","Checkov by Prisma Cloud 3.2.401","Checkov by Prisma Cloud 3.2.402","Checkov by Prisma Cloud 3.2.403","Checkov by Prisma Cloud 3.2.404","Checkov by Prisma Cloud 3.2.405","Checkov by Prisma Cloud 3.2.406","Checkov by Prisma Cloud 3.2.407","Checkov by Prisma Cloud 3.2.408","Checkov by Prisma Cloud 3.2.409","Checkov by Prisma Cloud 3.2.410","Checkov by Prisma Cloud 3.2.411","Checkov by Prisma Cloud 3.2.412","Checkov by Prisma Cloud 3.2.413","Checkov by Prisma Cloud 3.2.414","Checkov by Prisma Cloud 3.2.415","Checkov by Prisma Cloud 3.2.416","Checkov by Prisma Cloud 3.2.417","Checkov by Prisma Cloud 3.2.418","Checkov by Prisma Cloud 3.2.419","Checkov by Prisma Cloud 3.2.420","Checkov by Prisma Cloud 3.2.421","Checkov by Prisma Cloud 3.2.422","Checkov by Prisma Cloud 3.2.423","Checkov by Prisma Cloud 3.2.424","Checkov by Prisma Cloud 3.2.425","Checkov by Prisma Cloud 3.2.426","Checkov by Prisma Cloud 3.2.427","Checkov by Prisma Cloud 3.2.428","Checkov by Prisma Cloud 3.2.429","Checkov by Prisma Cloud 3.2.430","Checkov by Prisma Cloud 3.2.431","Checkov by Prisma Cloud 3.2.432","Checkov by Prisma Cloud 3.2.433","Checkov by Prisma Cloud 3.2.434","Checkov by Prisma Cloud 3.2.435","Checkov by Prisma Cloud 3.2.436","Checkov by Prisma Cloud 3.2.437","Checkov by Prisma Cloud 3.2.438","Checkov by Prisma Cloud 3.2.439","Checkov by Prisma Cloud 3.2.440","Checkov by Prisma Cloud 3.2.441","Checkov by Prisma Cloud 3.2.442","Checkov by Prisma Cloud 3.2.443","Checkov by Prisma Cloud 3.2.444","Checkov by Prisma Cloud 3.2.445","Checkov by Prisma Cloud 3.2.446","Checkov by Prisma Cloud 3.2.447","Checkov by Prisma Cloud 3.2.448","Checkov by Prisma Cloud 3.2.449","Checkov by Prisma Cloud 3.2.450","Checkov by Prisma Cloud 3.2.451","Checkov by Prisma Cloud 3.2.452","Checkov by Prisma Cloud 3.2.453","Checkov by Prisma Cloud 3.2.454","Checkov by Prisma Cloud 3.2.455","Checkov by Prisma Cloud 3.2.456","Checkov by Prisma Cloud 3.2.457","Checkov by Prisma Cloud 3.2.458","Checkov by Prisma Cloud 3.2.459","Checkov by Prisma Cloud 3.2.460","Checkov by Prisma Cloud 3.2.461","Checkov by Prisma Cloud 3.2.462","Checkov by Prisma Cloud 3.2.463","Checkov by Prisma Cloud 3.2.464","Checkov by Prisma Cloud 3.2.465","Checkov by Prisma Cloud 3.2.466","Checkov by Prisma Cloud 3.2.467","Checkov by Prisma Cloud 3.2.468","Checkov by Prisma Cloud 3.2.469","Checkov by Prisma Cloud 3.2.470","Checkov by Prisma Cloud 3.2.471","Checkov by Prisma Cloud 3.2.472","Checkov by Prisma Cloud 3.2.473","Checkov by Prisma Cloud 3.2.474","Checkov by Prisma Cloud 3.2.475","Checkov by Prisma Cloud 3.2.476","Checkov by Prisma Cloud 3.2.477","Checkov by Prisma Cloud 3.2.478","Checkov by Prisma Cloud 3.2.479","Checkov by Prisma Cloud 3.2.480","Checkov by Prisma Cloud 3.2.481","Checkov by Prisma Cloud 3.2.482","Checkov by Prisma Cloud 3.2.483","Checkov by Prisma Cloud 3.2.484","Checkov by Prisma Cloud 3.2.485","Checkov by Prisma Cloud 3.2.486","Checkov by Prisma Cloud 3.2.487","Checkov by Prisma Cloud 3.2.488","Checkov by Prisma Cloud 3.2.489","Checkov by Prisma Cloud 3.2.490","Checkov by Prisma Cloud 3.2.491","Checkov by Prisma Cloud 3.2.492","Checkov by Prisma Cloud 3.2.493","Checkov by Prisma Cloud 3.2.494","Checkov by Prisma Cloud 3.2.495","Checkov by Prisma Cloud 3.2.496","Checkov by Prisma Cloud 3.2.497","Checkov by Prisma Cloud 3.2.498","Checkov by Prisma Cloud 3.2.499","Checkov by Prisma Cloud 3.2.500","Checkov by Prisma Cloud 3.2.501","Checkov by Prisma Cloud 3.2.502","Checkov by Prisma Cloud 3.2.503","Checkov by Prisma Cloud 3.2.504","Checkov by Prisma Cloud 3.2.505","Checkov by Prisma Cloud 3.2.506","Checkov by Prisma Cloud 3.2.507","Checkov by Prisma Cloud 3.2.508","Checkov by Prisma Cloud 3.2.509","Checkov by Prisma Cloud 3.2.510","Checkov by Prisma Cloud 3.2.511","Checkov by Prisma Cloud 3.2.512","Checkov by Prisma Cloud 3.2.513","Checkov by Prisma Cloud 3.2.514","Checkov by Prisma Cloud 3.2.515","Checkov by Prisma Cloud 3.2.516","Checkov by Prisma Cloud 3.2.517","Checkov by Prisma Cloud 3.2.518","Checkov by Prisma Cloud 3.2.519","Checkov by Prisma Cloud 3.2.520","Checkov by Prisma Cloud 3.2.521","Checkov by Prisma Cloud 3.2.522","Checkov by Prisma Cloud 3.2.523","Checkov by Prisma Cloud 3.2.524","Checkov by Prisma Cloud 3.2.525","Checkov by Prisma Cloud 3.2.526","Checkov by Prisma Cloud 3.2.527","Checkov by Prisma Cloud 3.2.528","Checkov by Prisma Cloud 3.2.529","Checkov by Prisma Cloud 3.2.530","Checkov by Prisma Cloud 3.2.531","Checkov by Prisma Cloud 3.2.532"],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}}},"cveMetadata":{"assignerOrgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","assignerShortName":"palo_alto","cveId":"CVE-2026-0311","datePublished":"2026-10-14T20:29:19.297Z","dateReserved":"2025-11-03T20:45:09.854Z","dateUpdated":"2026-10-15T16:43:45.351Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-14 21:17:17","lastModifiedDate":"2026-10-15 20:38:04","problem_types":["CWE-918","CWE-918 CWE-918 Server-Side Request Forgery (SSRF)"],"metrics":{"cvssMetricV40":[{"source":"psirt@paloaltonetworks.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber","baseScore":1.1,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-15T16:19:42.105391Z","id":"CVE-2026-0311","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"311","Ordinal":"1","Title":"Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerabili","CVE":"CVE-2026-0311","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"311","Ordinal":"1","NoteData":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","Type":"Description","Title":"Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerabili"}]}}}