Path Traversal in Linux Linux_kernel
CVE-2026-0270
A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.002 (9.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux Linux_kernel
- Palo Alto Networks Cortex Xsoar — versions 8.13, 8.12.0, 8.11.0
- Paloaltonetworks Cortex_xsoar
Weakness classification (CWE)
References
- psirt@paloaltonetworks.com (related, US Government Resource, Third Party Advisory, third-party-advisory)
- psirt@paloaltonetworks.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-0270?
- CVE-2026-0270 is a high-severity vulnerability in Linux Linux_kernel, classified under Path Traversal. CVSS score: 7.5/10. Published 2026-06-10.
- How severe is CVE-2026-0270?
- High severity. CVSS v3 base score is 7.5 out of 10.