Command Injection in Palo Alto Cortex XSOAR/XSIAM OS Query Pack
CVE-2026-0313 Published on October 14, 2026

Cortex XSOAR: OS Command Injection Vulnerability
A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-0313 can be exploited with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE

Timeline

Initial Publication

Weakness Type

What is a Shell injection Vulnerability?

The software constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

CVE-2026-0313 has been classified to as a Shell injection vulnerability or weakness.


Products Associated with CVE-2026-0313

stack.watch emails you whenever new vulnerabilities are published in Palo Alto Networks Cortex Xsoar Os Query or Palo Alto Networks Cortex Xsiam Os Query. Just hit a watch button to start following.

Palo Alto Networks Cortex Xsoar Os Query
 
Palo Alto Networks Cortex Xsiam Os Query
 

Affected Versions

Palo Alto Networks Cortex XSOAR OS Query: Palo Alto Networks Cortex XSIAM OS Query: