Cortex XSOAR: Path Traversal Vulnerability_CVE-2026-0270

4.8 / 10

MEDIUM

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:M/U:Amber

Description

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.

Basic Information

ID CVE-2026-0270

Source palo_alto

Published Jun 10, 2026 at 20:59

Affected Product

Vendor Palo Alto Networks

Product Cortex XSOAR

Version 8.13

Affected Versions Palo Alto Networks Cortex XSOAR 8.13
Palo Alto Networks Cortex XSOAR 8.12.0
Palo Alto Networks Cortex XSOAR 8.11.0
Palo Alto Networks Cortex XSOAR 8.10.0

CWE Classification

CWE-22

References

{
    "lastseen": "",
    "description": "A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux  allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.",
    "published": "2026-06-10T20:59:00.350Z",
    "modified": "2026-06-10T20:59:00.350Z",
    "type": "cve",
    "title": "Cortex XSOAR: Path Traversal Vulnerability",
    "source": "palo_alto",
    "references": "https://security.paloaltonetworks.com/CVE-2026-0270\nhttps://nvd.nist.gov/vuln/detail/CVE-2007-4559",
    "id": "CVE-2026-0270",
    "bulletinFamily": "",
    "cwe": [
        "CWE-22"
    ],
    "cvelist": null,
    "sourceData": "Palo Alto Networks Cortex XSOAR 8.13\nPalo Alto Networks Cortex XSOAR 8.12.0\nPalo Alto Networks Cortex XSOAR 8.11.0\nPalo Alto Networks Cortex XSOAR 8.10.0",
    "sourceHref": "",
    "cvss": {
        "score": 4.8,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:M/U:Amber",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cortex XSOAR",
    "version": "8.13",
    "vendor": "Palo Alto Networks",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}