{"id":"CVE-2026-0313","title":"A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.","summary":"A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.","severity":"none","cwe":["CWE-78"],"published":"2026-10-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T21:17:18.173","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-0313","references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0313","label":"psirt@paloaltonetworks.com"}],"tags":["nvd"],"ingestedAt":"2026-10-14T21:57:04.815Z","slug":"CVE-2026-0313","body":"## Overview\n\nA command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}