CVE-2026-0313
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query…
- Risk score
- 58/100
- CVSS
- 6.1 v4.0
- Exploit chance (30 days)
- 0.8%
- Published
- 14 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 6.1 medium
- On your watchlist: palo alto
References
Original description
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
Last activity 14 Oct 2026. Patch Forecast updates every hour.