CVE-2026-0313 Patch Work: Getting the Cortex OS Query Pack to 1.0.17

Palo Alto Networks published CVE-2026-0313 on 14 October 2026, identifying an OS command injection vulnerability classified as CWE-78. This flaw exists within the OS Query content pack for Cortex XSOAR and Cortex XSIAM. The vulnerability allows an authenticated administrator to execute arbitrary operating system commands on remote endpoints. Because the vulnerable code is shipped as a content pack, organizations may remain affected even if their primary platform releases are current. Patching requires updating to version 1.0.17.