High [CVE-2026-0313] Cortex XSOAR: OS Command Injection Vulnerability
This high-severity Palo Alto Networks advisory covers CVE-2026-0313 affecting Cortex XSOAR.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Get an email when Palo Alto Networks publishes the next one.
VulniPulse checks Palo Alto Networks's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.
Summary
CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability
- Cortex XSOAR OS Query < 1.0.17
- Cortex XSIAM OS Query < 1.0.17
Official advisory · high-confidence parse· fetched 8 days ago·verify at source
- Cortex XSOAR OS Query >= 1.0.17
- Cortex XSIAM OS Query >= 1.0.17
Official advisory · high-confidence parse· fetched 8 days ago·verify at source
Mitigation checklist
- VersionMinor VersionSuggested SolutionCortex XSOAR OS QueryUpdate to 1.0.17 or later from the Cortex XSOAR Marketplace.Cortex XSIAM OS Query Update to 1.0.17 or later from the Cortex XSOAR Marketplace.
- Customers who are unable to upgrade immediately can mitigate this issue by disabling the OSQueryBasicQuery automation in Cortex XSOAR or Cortex XSIAM.
Official advisory · high-confidence parse· fetched 8 days ago·verify at source
More Palo Alto Networks advisories
- CVE-2026-0274Jun 10, 2026Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
- CVE-2026-0270Jun 10, 2026Cortex XSOAR: Path Traversal Vulnerability
- CVE-2026-0234Apr 13, 2026improper verification of cryptographic signature vulnerability exists in Cortex XSOAR
- CVE-2026-111497Oct 26, 2026Portfolio Status: Impact of Brotli Vulnerability on Palo Alto Networks Products
- CVE-2026-109618Oct 21, 2026Impact of Critical Vulnerabilities in PHP (, CVE-2026-109619) on Palo Alto Networks
- CVE-2026-0317Oct 14, 2026PAN-OS: Denial of Service Vulnerability
Android app · Google Play
Monitor future Palo Alto Networks CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.