{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-0311", "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "state": "PUBLISHED", "assignerShortName": "palo_alto", "dateReserved": "2025-11-03T20:45:09.854Z", "datePublished": "2026-10-14T20:29:19.297Z", "dateUpdated": "2026-10-15T16:43:45.351Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0", "shortName": "palo_alto", "dateUpdated": "2026-10-14T20:29:19.297Z" }, "title": "Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability", "datePublic": "2026-10-14T16:00:00.000Z", "problemTypes": [ { "descriptions": [ { "lang": "en", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "type": "CWE" } ] } ], "impacts": [ { "capecId": "CAPEC-664", "descriptions": [ { "lang": "en", "value": "CAPEC-664 Server Side Request Forgery" } ] } ], "affected": [ { "vendor": "Palo Alto Networks", "product": "Checkov by Prisma Cloud", "versions": [ { "status": "affected", "version": "0", "lessThan": "3.2.533", "changes": [ { "at": "3.2.533", "status": "unaffected" } ], "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "cpeApplicability": [ { "operator": "OR", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:a:palo_alto_networks:checkov_by_prisma_cloud:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.2.0", "versionEndExcluding": "3.2.533" } ] } ] } ], "descriptions": [ { "lang": "en", "value": "A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.", "supportingMedia": [ { "type": "text/html", "base64": false, "value": "
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
No special configuration is required.
| Version | Minor Version | Suggested Solution |
|---|---|---|
| Checkov by Prisma Cloud | 3.2.0 through 3.2.532 | Upgrade to 3.2.533 or later. |