https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:33:04.315689+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-3049 CVE-2021-3049 — Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability 2026-10-07T04:33:04.316813+00:00

Affected: Palo Alto Networks Cortex XSOAR

An improper authorization vulnerability in the Palo Alto Networks Cortex XSOAR server enables an authenticated network-based attacker with investigation read permissions to download files from incident investigations of which they are aware but are not a part of. This issue impacts: All Cortex XSOAR 5.5.0 builds; Cortex XSOAR 6.1.0 builds earlier than 12099345. This issue does not impact Cortex XSOAR 6.2.0 versions.