CVE-2026-0234: high-severity vulnerability in Palo Alto Networks Cortex XSIAM Microsoft…
Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
Published · Updated
Follow this CVE+ Monitor Cortex XSIAM Microsoft Teams Marketplace+ Monitor Cortex XSOAR Microsoft Teams Marketplace
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 0.2%
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red