Command Injection Vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM
CVE-2026-0313

6.1MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Cortex Xsoar Os Query
Cortex Xsiam Os Query
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-0313?

A command injection vulnerability exists within the OS Query content pack of Palo Alto Networks' Cortex XSOAR and Cortex XSIAM products. This vulnerability allows an authenticated administrator to run arbitrary OS commands on remote endpoints, potentially compromising system integrity and security. It is crucial for users to apply relevant patches and mitigate risks associated with this vulnerability.

Affected Version(s)

Cortex XSIAM OS Query 0 < 1.0.17

Cortex XSOAR OS Query 0 < 1.0.17

References

https://security.paloaltonetworks.com/CVE-2026-0313
vendor-advisory

CVSS V4

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mohamed Lemine Ahmed Jidou (AegisSec)
.