CVE-2026-0234
Received Received - Intake

Cryptographic Signature Bypass in Cortex XSOAR/XSIAM Enables Unauthorized Access

Publication date: 2026-04-13

Last updated on: 2026-04-13

Assigner: Palo Alto Networks, Inc.

Description
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-04-13
Last Modified
2026-04-13
Generated
2026-07-06
AI Q&A
2026-04-13
EPSS Evaluated
2026-07-05
NVD
CVE-2026-0234
EUVD
EUVD-2026-21899

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
palo_alto_networks cortex_xsoar *
palo_alto_networks cortex_xsiam *
palo_alto_networks cortex_xsoar From 1.5.0 (inc) to 1.5.52 (exc)
palo_alto_networks cortex_xsiam From 1.5.0 (inc) to 1.5.52 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-347 The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-0234 is a high-severity vulnerability in Palo Alto Networks' Cortex XSOAR and Cortex XSIAM platforms during their integration with Microsoft Teams. It is caused by improper verification of cryptographic signatures, which allows an unauthenticated attacker to access and modify protected resources.

This means that the system fails to correctly check the authenticity of cryptographic signatures, enabling attackers to spoof signatures and bypass security controls without needing any privileges or user interaction.

Impact Analysis

This vulnerability can have a significant impact by allowing an unauthenticated attacker to access and modify protected resources within the affected platforms.

  • Compromise of confidentiality, integrity, and availability of data and resources.
  • Potential unauthorized changes to sensitive information or system configurations.
  • No user interaction or privileges are required for exploitation, increasing the risk.
  • The attack is network-based but has high complexity.
Detection Guidance

There are no specific detection methods or commands provided to identify this vulnerability on your network or system.

Mitigation Strategies

The only effective mitigation is to upgrade the affected Microsoft Teams Marketplace integration versions to 1.5.52 or later for both Cortex XSOAR and Cortex XSIAM platforms.

No other workarounds or mitigations are currently known.

Compliance Impact

This vulnerability allows an unauthenticated attacker to access and modify protected resources, impacting the confidentiality, integrity, and availability of data at a high level.

Such unauthorized access and modification of protected resources could potentially lead to non-compliance with common standards and regulations like GDPR and HIPAA, which require strict protection of sensitive data and ensuring data integrity and confidentiality.

However, the provided information does not explicitly mention specific impacts or assessments related to compliance with these standards.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0234. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart