CVE-2026-0234 — Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration

CVE-2026-0234

Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration PUBLISHED

Description (CNA)

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XSOAR Microsoft Teams Marketplace	affected 1.5.0 before 1.5.52
Palo Alto Networks / Cortex XSIAM Microsoft Teams Marketplace	affected 1.5.0 before 1.5.52

CWE

CWE-347

References

https://security.paloaltonetworks.com/CVE-2026-0234

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.