CVE-2026-0313

UNKNOWN 0.0

Cortex XSOAR: OS Command Injection Vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.

CWE	CWE-78
Vendor	palo alto networks
Product	cortex xsoar os query
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for palo alto networks cortex xsoar os query

Be the first to know when new unknown vulnerabilities affecting palo alto networks cortex xsoar os query are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Palo Alto Networks / Cortex XSOAR OS Query

0 < 1.0.17

Palo Alto Networks / Cortex XSIAM OS Query

0 < 1.0.17

References

NVD ↗ CVE.org ↗ EPSS Data ↗

security.paloaltonetworks.com: https://security.paloaltonetworks.com/CVE-2026-0313

Credits

Mohamed Lemine Ahmed Jidou (AegisSec)