VULNERABILITY INTELLIGENCE

CVE-2026-0270

CVSS score7.5 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-06-10
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-22

Primary references