CVE-2026-0270

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XSOAR engine software running on Linux (affected versions not specified)

Description A path traversal issue exists due to improper restriction of directory path names. This allows an unauthenticated attacker on an adjacent network to perform a man-in-the-middle (MITM) attack—where the attacker intercepts and manipulates network response traffic—to write arbitrary files to the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.