Skip to content
Sign in
6.1 Medium

CVE-2026-0313 A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an…

Description

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.

Affected products and versions

Product Affected versions Fixed in
Cortex XSOAR OS Query 1.0 earliest → < 1.0.17 1.0.17
Cortex XSIAM OS Query 1.0 earliest → < 1.0.17 1.0.17
Track this CVE