CVE-2026-0234
Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.2EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
13 Apr 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red
Affected products
Palo Alto Networks · Cortex XSIAM Microsoft Teams MarketplacePalo Alto Networks · Cortex XSOAR Microsoft Teams MarketplaceWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →