4.8
Medium
CVE-2026-0270 A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an…
Description
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XSOAR | 8.12.0 | No fix stated |
| Cortex XSOAR | 8.11.0 | No fix stated |
| Cortex XSOAR | 8.10.0 | No fix stated |
| Cortex XSOAR 6.14 | earliest → < 6.14.0 | 6.14.0 |
| Cortex XSOAR 6.13 | earliest → < 6.13.0 | 6.13.0 |
| Cortex XSOAR 6.12 | earliest → < 6.12.0 | 6.12.0 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
- CVE-2007-4559: Python tarfile module path traversal nvd.nist.gov
Timeline
- Published
- Last modified
Other CVEs of Cortex XSOAR
The 11 CVEs of Cortex XSOAR →
CVE-2024-9470
A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view…
5.3
Medium
CVE-2023-3282
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.4
Medium
CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user…
6.5
Medium
CVE-2022-0031
A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a…
6.7
Medium