{"id":"CVE-2026-0234","state":"PUBLISHED","title":"Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration","description":"An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.","publishedAt":"2026-04-13T07:15:03.667Z","updatedAt":"2026-04-14T03:55:44.286Z","severity":{"score":7.2,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red","source":"palo_alto"},"assigner":"palo_alto","products":["Palo Alto Networks Cortex XSOAR Microsoft Teams Marketplace","Palo Alto Networks Cortex XSIAM Microsoft Teams Marketplace"],"affected":[{"vendor":"Palo Alto Networks","product":"Cortex XSOAR Microsoft Teams Marketplace","defaultStatus":"unaffected","versions":[{"version":"1.5.0","status":"affected","lessThan":"1.5.52","changes":[{"at":"1.5.52","status":"unaffected"}],"versionType":"custom"}]},{"vendor":"Palo Alto Networks","product":"Cortex XSIAM Microsoft Teams Marketplace","defaultStatus":"unaffected","versions":[{"version":"1.5.0","status":"affected","lessThan":"1.5.52","changes":[{"at":"1.5.52","status":"unaffected"}],"versionType":"custom"}]}],"references":["https://security.paloaltonetworks.com/CVE-2026-0234"],"weaknesses":["CWE-347"],"ingestedAt":"2026-10-29T20:10:13.529Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/0xxx/CVE-2026-0234.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-0234","state":"PUBLISHED","datePublished":"2026-04-13T07:15:03.667Z","dateUpdated":"2026-04-14T03:55:44.286Z","assignerShortName":"palo_alto","assignerOrgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","dateReserved":"2025-11-03T20:43:55.337Z"},"containers":{"cna":{"title":"Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration","descriptions":[{"lang":"en","value":"An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources."}],"affected":[{"vendor":"Palo Alto Networks","product":"Cortex XSOAR Microsoft Teams Marketplace","defaultStatus":"unaffected","versions":[{"version":"1.5.0","status":"affected","lessThan":"1.5.52","changes":[{"at":"1.5.52","status":"unaffected"}],"versionType":"custom"}]},{"vendor":"Palo Alto Networks","product":"Cortex XSIAM Microsoft Teams Marketplace","defaultStatus":"unaffected","versions":[{"version":"1.5.0","status":"affected","lessThan":"1.5.52","changes":[{"at":"1.5.52","status":"unaffected"}],"versionType":"custom"}]}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0234","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"RED","version":"4.0","baseSeverity":"HIGH","baseScore":7.2,"vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-347","lang":"en","description":"CWE-347 Improper Verification of Cryptographic Signature","type":"CWE"}]}],"providerMetadata":{"shortName":"palo_alto","orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","dateUpdated":"2026-04-13T07:15:03.667Z"},"datePublic":"2026-04-08T16:00:00.000Z","impacts":[{"capecId":"CAPEC-475","descriptions":[{"lang":"en","value":"CAPEC-475 Signature Spoofing by Improper Validation"}]}],"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:palo_alto_networks:cortex_xsoar_microsoft_teams_marketplace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"1.5.52"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:palo_alto_networks:cortex_xsiam_microsoft_teams_marketplace:*:*:*:*:*:*:*:*","versionStartIncluding":"1.5.0","versionEndExcluding":"1.5.52"}]}]}],"workarounds":[{"lang":"eng","value":"No known workarounds exist for this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"No known workarounds exist for this issue."}]}],"solutions":[{"lang":"eng","value":"Version\nMinor Version\nSuggested Solution\n\n                                Cortex XSOAR Microsoft Teams Marketplace 1.5\n\n                                1.5.0 through 1.5.51\n                                Upgrade to 1.5.52 or later.\n                            \n                                Cortex XSIAM Microsoft Teams Marketplace 1.5\n\n                                1.5.0 through 1.5.51\n                                Upgrade to 1.5.52 or later.","supportingMedia":[{"type":"text/html","base64":false,"value":"<table class=\"tbl\"><thead><tr><th>Version<br></th><th>Minor Version<br></th><th>Suggested Solution<br></th></tr></thead><tbody><tr>\n                                <td>Cortex XSOAR Microsoft Teams Marketplace 1.5<br></td>\n                                <td>1.5.0 through 1.5.51</td>\n                                <td>Upgrade to 1.5.52 or later.</td>\n                            </tr><tr>\n                                <td>Cortex XSIAM Microsoft Teams Marketplace 1.5<br></td>\n                                <td>1.5.0 through 1.5.51</td>\n                                <td>Upgrade to 1.5.52 or later.</td>\n                            </tr></tbody></table>"}]}],"exploits":[{"lang":"en","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}]}],"timeline":[{"time":"2026-04-08T16:00:00.000Z","lang":"en","value":"Initial Publication"}],"credits":[{"lang":"en","value":"quinn","type":"finder"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"},"x_affectedList":["Cortex XSOAR Microsoft Teams Marketplace 1.5.0","Cortex XSOAR Microsoft Teams Marketplace 1.5.1","Cortex XSOAR Microsoft Teams Marketplace 1.5.2","Cortex XSOAR Microsoft Teams Marketplace 1.5.3","Cortex XSOAR Microsoft Teams Marketplace 1.5.4","Cortex XSOAR Microsoft Teams Marketplace 1.5.5","Cortex XSOAR Microsoft Teams Marketplace 1.5.6","Cortex XSOAR Microsoft Teams Marketplace 1.5.7","Cortex XSOAR Microsoft Teams Marketplace 1.5.8","Cortex XSOAR Microsoft Teams Marketplace 1.5.9","Cortex XSOAR Microsoft Teams Marketplace 1.5.10","Cortex XSOAR Microsoft Teams Marketplace 1.5.11","Cortex XSOAR Microsoft Teams Marketplace 1.5.12","Cortex XSOAR Microsoft Teams Marketplace 1.5.13","Cortex XSOAR Microsoft Teams Marketplace 1.5.14","Cortex XSOAR Microsoft Teams Marketplace 1.5.15","Cortex XSOAR Microsoft Teams Marketplace 1.5.16","Cortex XSOAR Microsoft Teams Marketplace 1.5.17","Cortex XSOAR Microsoft Teams Marketplace 1.5.18","Cortex XSOAR Microsoft Teams Marketplace 1.5.19","Cortex XSOAR Microsoft Teams Marketplace 1.5.20","Cortex XSOAR Microsoft Teams Marketplace 1.5.21","Cortex XSOAR Microsoft Teams Marketplace 1.5.22","Cortex XSOAR Microsoft Teams Marketplace 1.5.23","Cortex XSOAR Microsoft Teams Marketplace 1.5.24","Cortex XSOAR Microsoft Teams Marketplace 1.5.25","Cortex XSOAR Microsoft Teams Marketplace 1.5.26","Cortex XSOAR Microsoft Teams Marketplace 1.5.27","Cortex XSOAR Microsoft Teams Marketplace 1.5.28","Cortex XSOAR Microsoft Teams Marketplace 1.5.29","Cortex XSOAR Microsoft Teams Marketplace 1.5.30","Cortex XSOAR Microsoft Teams Marketplace 1.5.31","Cortex XSOAR Microsoft Teams Marketplace 1.5.32","Cortex XSOAR Microsoft Teams Marketplace 1.5.33","Cortex XSOAR Microsoft Teams Marketplace 1.5.34","Cortex XSOAR Microsoft Teams Marketplace 1.5.35","Cortex XSOAR Microsoft Teams Marketplace 1.5.36","Cortex XSOAR Microsoft Teams Marketplace 1.5.37","Cortex XSOAR Microsoft Teams Marketplace 1.5.38","Cortex XSOAR Microsoft Teams Marketplace 1.5.39","Cortex XSOAR Microsoft Teams Marketplace 1.5.40","Cortex XSOAR Microsoft Teams Marketplace 1.5.41","Cortex XSOAR Microsoft Teams Marketplace 1.5.42","Cortex XSOAR Microsoft Teams Marketplace 1.5.43","Cortex XSOAR Microsoft Teams Marketplace 1.5.44","Cortex XSOAR Microsoft Teams Marketplace 1.5.45","Cortex XSOAR Microsoft Teams Marketplace 1.5.46","Cortex XSOAR Microsoft Teams Marketplace 1.5.47","Cortex XSOAR Microsoft Teams Marketplace 1.5.48","Cortex XSOAR Microsoft Teams Marketplace 1.5.49","Cortex XSOAR Microsoft Teams Marketplace 1.5.50","Cortex XSOAR Microsoft Teams Marketplace 1.5.51","Cortex XSIAM Microsoft Teams Marketplace 1.5.0","Cortex XSIAM Microsoft Teams Marketplace 1.5.1","Cortex XSIAM Microsoft Teams Marketplace 1.5.2","Cortex XSIAM Microsoft Teams Marketplace 1.5.3","Cortex XSIAM Microsoft Teams Marketplace 1.5.4","Cortex XSIAM Microsoft Teams Marketplace 1.5.5","Cortex XSIAM Microsoft Teams Marketplace 1.5.6","Cortex XSIAM Microsoft Teams Marketplace 1.5.7","Cortex XSIAM Microsoft Teams Marketplace 1.5.8","Cortex XSIAM Microsoft Teams Marketplace 1.5.9","Cortex XSIAM Microsoft Teams Marketplace 1.5.10","Cortex XSIAM Microsoft Teams Marketplace 1.5.11","Cortex XSIAM Microsoft Teams Marketplace 1.5.12","Cortex XSIAM Microsoft Teams Marketplace 1.5.13","Cortex XSIAM Microsoft Teams Marketplace 1.5.14","Cortex XSIAM Microsoft Teams Marketplace 1.5.15","Cortex XSIAM Microsoft Teams Marketplace 1.5.16","Cortex XSIAM Microsoft Teams Marketplace 1.5.17","Cortex XSIAM Microsoft Teams Marketplace 1.5.18","Cortex XSIAM Microsoft Teams Marketplace 1.5.19","Cortex XSIAM Microsoft Teams Marketplace 1.5.20","Cortex XSIAM Microsoft Teams Marketplace 1.5.21","Cortex XSIAM Microsoft Teams Marketplace 1.5.22","Cortex XSIAM Microsoft Teams Marketplace 1.5.23","Cortex XSIAM Microsoft Teams Marketplace 1.5.24","Cortex XSIAM Microsoft Teams Marketplace 1.5.25","Cortex XSIAM Microsoft Teams Marketplace 1.5.26","Cortex XSIAM Microsoft Teams Marketplace 1.5.27","Cortex XSIAM Microsoft Teams Marketplace 1.5.28","Cortex XSIAM Microsoft Teams Marketplace 1.5.29","Cortex XSIAM Microsoft Teams Marketplace 1.5.30","Cortex XSIAM Microsoft Teams Marketplace 1.5.31","Cortex XSIAM Microsoft Teams Marketplace 1.5.32","Cortex XSIAM Microsoft Teams Marketplace 1.5.33","Cortex XSIAM Microsoft Teams Marketplace 1.5.34","Cortex XSIAM Microsoft Teams Marketplace 1.5.35","Cortex XSIAM Microsoft Teams Marketplace 1.5.36","Cortex XSIAM Microsoft Teams Marketplace 1.5.37","Cortex XSIAM Microsoft Teams Marketplace 1.5.38","Cortex XSIAM Microsoft Teams Marketplace 1.5.39","Cortex XSIAM Microsoft Teams Marketplace 1.5.40","Cortex XSIAM Microsoft Teams Marketplace 1.5.41","Cortex XSIAM Microsoft Teams Marketplace 1.5.42","Cortex XSIAM Microsoft Teams Marketplace 1.5.43","Cortex XSIAM Microsoft Teams Marketplace 1.5.44","Cortex XSIAM Microsoft Teams Marketplace 1.5.45","Cortex XSIAM Microsoft Teams Marketplace 1.5.46","Cortex XSIAM Microsoft Teams Marketplace 1.5.47","Cortex XSIAM Microsoft Teams Marketplace 1.5.48","Cortex XSIAM Microsoft Teams Marketplace 1.5.49","Cortex XSIAM Microsoft Teams Marketplace 1.5.50","Cortex XSIAM Microsoft Teams Marketplace 1.5.51"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-13T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2026-0234"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-14T03:55:44.286Z"}}]}}}