SB2026101524 - Server-Side Request Forgery (SSRF) in Checkov by Prisma Cloud

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026101524

SB2026101524 - Server-Side Request Forgery (SSRF) in Checkov by Prisma Cloud

Published: October 15, 2026

Security Bulletin ID SB2026101524
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Server-Side Request Forgery (SSRF) (CVE-ID: CVE-2026-0311)

CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)

CVSSv4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:N/SA:N]


The vulnerability allows a remote attacker to make unauthorized network requests from the host to internal services.

The vulnerability exists due to server-side request forgery in Checkov by Prisma Cloud when scanning untrusted content. A remote attacker can supply untrusted content for scanning to make unauthorized network requests from the host to internal services.

Exploitation requires passive user interaction. No special configuration is required.


Remediation

Install update from vendor's website.

References