/
cves:CVE-2026-0313 × limpar

Resultados

2 casos · pág. 1/1

Palo Alto Networks Cortex XSOAR/XSIAM OS Query content pack command injection (CVE-2026-0313) allows authenticated admin RCE

Palo Alto Networks disclosed CVE-2026-0313, an OS command injection vulnerability (CWE-78) in the OS Query content pack for Cortex XSOAR and Cortex XSIAM. An authenticated administrator can execute arbitrary OS commands on remote endpoints. The vendor rates it MEDIUM with MODERATE suggested urgency (CVSS-BT 6.1 / CVSS-B 8.6) and states it…

cert.ssi.gouv.fr · critical

CERT-FR: Multiple Palo Alto Networks vulnerabilities, including RCE; CVE-2026-0322 actively exploited

CERT-FR advisory CERTFR-2026-AVI-1317 is not the source here; this record covers CERTFR-2026-AVI-1326, which reports multiple vulnerabilities in Palo Alto Networks products fixed in vendor bulletins of October 14, 2026. Some flaws allow remote arbitrary code execution, privilege escalation and remote denial of service. Other impact classe…