
Vulnerabilities
Palo Alto Cortex XSOAR OS Command Injection Flaw CVE-2026-0313
Authenticated admins can run remote OS commands via OS Query pack in Cortex XSOAR and XSIAM before version 1.0.17.
Everything Packet Tribune has reported about OS Command Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.

Authenticated admins can run remote OS commands via OS Query pack in Cortex XSOAR and XSIAM before version 1.0.17.

Unauthenticated users can execute server commands via manipulated output paths in the voice cloning tool’s vocal remover interface.