CVE-2026-0270CWE-22
Cortex XSOAR: Path Traversal Vulnerability
Medium · published June 10, 2026
What it is
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.
The record
Technical detail
- CVSS v4.0
- 4.8 · MEDIUM
- Vector
- CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:D/RE:M/U:Amber
- EPSS
- 0.00199 · 9.2th percentile
- Weakness
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- Published
- 2026-06-10T20:59Z
EPSS history
Timeline