CVE-2026-0313

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.

Score

CVSS 4.0 6.1 Medium

Status

Awaiting Analysis - psirt@paloaltonetworks.com

Published

2026-10-14

Last modified

2026-10-16

Weaknesses

CWE-78

Affected products

• Cortex Xsiam Os Query (Palo Alto Networks)
• Cortex Xsoar Os Query (Palo Alto Networks)

References

• https://security.paloaltonetworks.com/CVE-2026-0313