Vulnerabilities
Cortex XSOAR OS Query Pack Flaw CVE-2026-0313 Lets Admins Run Commands
An authenticated admin can run arbitrary OS commands via the OS Query pack in Cortex XSOAR or XSIAM, requiring a specific integration setup.
Everything TechSec Headlines has reported about OS Command Injection: 3 stories, newest first. Part of our Vulnerabilities coverage.
An authenticated admin can run arbitrary OS commands via the OS Query pack in Cortex XSOAR or XSIAM, requiring a specific integration setup.
A critical flaw in Adobe Experience Manager allows remote code execution without user interaction, impacting versions up to 6.5.25.
A high-severity flaw in the databases-on-aws plugin allowed remote attackers to run arbitrary commands. Version 1.7.1 patches the issue.