{"affected":[{"defaultStatus":"unaffected","product":"Checkov by Prisma Cloud","source":"CNA: palo_alto","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"3.4.2","status":"unaffected"}],"lessThan":"3.4.2","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-0323","cwes":["CWE-918"],"description":"A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":1.1,"severity":"low","source":"CNA: palo_alto","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:H/SI:H/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0"}],"modifiedAt":1794427417104,"publishedAt":1794427417104,"references":[{"source":"CNA: palo_alto","tags":["vendor-advisory"],"url":"https://security.paloaltonetworks.com/CVE-2026-0323"}],"remediation":[{"kind":"fix","source":"CNA: palo_alto","text":"VERSION                     MINOR VERSION            SUGGESTED SOLUTION\nCheckov by Prisma Cloud     2.0.1018 through 3.4.1   Upgrade to 3.4.2 or later.\n\n\nCheckov integration in Prisma Cloud is upgraded automatically when new versions become available."},{"kind":"workaround","source":"CNA: palo_alto","text":"Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration explicitly via a trusted configuration file rather than allowing configuration to be auto-loaded from the scanned directory."}],"revision":"a70443ae0d17e3cdf74b14fdef26bcffab88ce7749b156330bc6aad9315b3d33","sources":[{"modifiedAt":1794427417104,"name":"CNA: palo_alto","retrievedAt":1794431302223,"url":"https://www.cve.org/CVERecord?id=CVE-2026-0323"}],"ssvc":null,"status":"published","title":"Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability","updatedAt":1794431302223}