CVE-2026-0234
Cryptographic Signature Bypass in Cortex XSOAR/XSIAM Enables Unauthorized Access
Publication date: 2026-04-13
Last updated on: 2026-04-13
Assigner: Palo Alto Networks, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| palo_alto_networks | cortex_xsoar | * |
| palo_alto_networks | cortex_xsiam | * |
| palo_alto_networks | cortex_xsoar | From 1.5.0 (inc) to 1.5.52 (exc) |
| palo_alto_networks | cortex_xsiam | From 1.5.0 (inc) to 1.5.52 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-347 | The product does not verify, or incorrectly verifies, the cryptographic signature for data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-0234 is a high-severity vulnerability in Palo Alto Networks' Cortex XSOAR and Cortex XSIAM platforms during their integration with Microsoft Teams. It is caused by improper verification of cryptographic signatures, which allows an unauthenticated attacker to access and modify protected resources.
This means that the system fails to correctly check the authenticity of cryptographic signatures, enabling attackers to spoof signatures and bypass security controls without needing any privileges or user interaction.
How can this vulnerability impact me? :
This vulnerability can have a significant impact by allowing an unauthenticated attacker to access and modify protected resources within the affected platforms.
- Compromise of confidentiality, integrity, and availability of data and resources.
- Potential unauthorized changes to sensitive information or system configurations.
- No user interaction or privileges are required for exploitation, increasing the risk.
- The attack is network-based but has high complexity.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
There are no specific detection methods or commands provided to identify this vulnerability on your network or system.
What immediate steps should I take to mitigate this vulnerability?
The only effective mitigation is to upgrade the affected Microsoft Teams Marketplace integration versions to 1.5.52 or later for both Cortex XSOAR and Cortex XSIAM platforms.
No other workarounds or mitigations are currently known.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability allows an unauthenticated attacker to access and modify protected resources, impacting the confidentiality, integrity, and availability of data at a high level.
Such unauthorized access and modification of protected resources could potentially lead to non-compliance with common standards and regulations like GDPR and HIPAA, which require strict protection of sensitive data and ensuring data integrity and confidentiality.
However, the provided information does not explicitly mention specific impacts or assessments related to compliance with these standards.