CVE-2026-0313
CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)
Published Oct 14, 2026 · updated Oct 14, 2026 · Palo Alto Networks
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · NIST NVD
Detected
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
Sources
- CVE.orgVulnerability recordCVE-2026-0313
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-0313
30-day exploitation probability 0.8%
first.org - NIST NVDVulnerability recordCVE-2026-0313
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.
nvd.nist.gov - Palo Alto NetworksVendor advisoryCVE-2026-0313security.paloaltonetworks.com