CVE-2026-0311: falha de baixa gravidade em Palo Alto Networks Checkov by Prisma Cloud
Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 1.1epss 0.1%
A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:L/SI:L/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Produtos afetados
Palo Alto Networks · Checkov by Prisma CloudCVEs relacionadas — Palo Alto Networks Checkov by Prisma Cloud
No mesmo produto, das mais perigosas para as menos.
CVE-2026-0302LOWCheckov by Prisma Cloud: OS Command Injection VulnerabilityEPSS 0.8%CVE-2025-2180MEDIUMCheckov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code ExecutionEPSS 0.2%CVE-2026-0303LOWCheckov by Prisma Cloud: Code Execution via Auto-Loaded Configuration FileEPSS 0.2%CVE-2025-2181MEDIUMCheckov by Prisma Cloud: Cleartext Exposure of CredentialsEPSS 0.2%CVE-2026-0312MEDIUMCheckov by Prisma Cloud: Path Traversal VulnerabilitiesEPSS 0.1%