LOWCVSS v4 1.1Vulnerability

CVE-2026-0323

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services.

Properties

Severity
LOW
Nvd fetched at
2026-11-11T23:49:45.533241+00:00
Cvss severity
LOW
Cvss score
1.1
Retrieved at
2026-11-11T23:50:18+00:00
Score
1.1
Cvss version
4.0
Last source
NVD
Cve id
CVE-2026-0323
Cvss vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
First seen by Signal
2026-11-11T23:46:41+00:00
Name
CVE-2026-0323
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Published at
2026-11-11T20:16:59.227
Last modified
2026-11-11T20:16:59.383

Related Entities (1)

HAS_WEAKNESS (1)

Related research

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-0323 (CVSS v4 1.1) — Ninja Signal Threat Intelligence | Ninja Signal