CVE-2026-0313 — Cortex XSOAR: OS Command Injection Vulnerability

CVE-2026-0313

Cortex XSOAR: OS Command Injection Vulnerability PUBLISHED

Description (CNA)

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XSOAR OS Query	affected 0 before 1.0.17
Palo Alto Networks / Cortex XSIAM OS Query	affected 0 before 1.0.17

CWE

CWE-78

References

https://security.paloaltonetworks.com/CVE-2026-0313

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.