Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-0234

Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cortex XSOAR Microsoft Teams Marketplace

Default version status: unaffected

  • 1.5.0 to < 1.5.52affected

Palo Alto Networks Cortex XSIAM Microsoft Teams Marketplace

Default version status: unaffected

  • 1.5.0 to < 1.5.52affected

References