CVE-2026-0313 in Cortex XSOAR OS Query

Sumário

de MITRE • 14/10/2026

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsável: Palo Alto
• Reservar: 03/11/2025
• Divulgação: 14/10/2026
• Moderação: aceite
• Entrada: VDB-420383
• CPE: 20261014
• CWE: CWE-78 (confirmado)
• CVSS: 9.1 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-0313
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-0313
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-0313/