Vulnerability in Palo Alto Networks Cortex XSOAR OS Query

[ Description ]Official description

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• CERT-FR15 Oct 2026CERTFR-2026-AVI-1326

  Multiple vulnerabilities in Palo Alto Networks products Translated from French

  Multiple vulnerabilities have been discovered in Palo Alto Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service. Palo Alto…

  CVE-2026-87464CVE-2026-87646CVE-2026-87445+458 more CVEs
• BSI CERT-Bund14 Oct 2026WID-SEC-2026-3946

  Palo Alto Networks Cortex XSOAR: Vulnerability allows code execution Translated from German

  CVE-2026-0313

[ References ]References

• security.paloaltonetworks.com/CVE-2026-0313