CVE-2023-3282: Palo Alto Networks Cortex Xsoar

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system enables a local attacker to execute programs with elevated privileges if the attacker has shell access to the engine.

Affected products

• Palo Alto Networks Cortex Xsoar: before 6.10.0 (fixed in 6.10.0)

Published 2023-11-08. Last modified 2026-06-17.