Palo Alto Networks Cortex XSOAR/XSIAM OS Query content pack command injection (CVE-2026-0313) allows authenticated admin RCE
Palo Alto Networks disclosed CVE-2026-0313, an OS command injection vulnerability (CWE-78) in the OS Query content pack for Cortex XSOAR and Cortex XSIAM. An authenticated administrator can execute arbitrary OS commands on remote endpoints. The vendor rates it MEDIUM with MODERATE suggested urgency (CVSS-BT 6.1 / CVSS-B 8.6) and states it…