Vulnerability-Lookup

CVE-2026-0234 (GCVE-0-2026-0234)

Vulnerability from cvelistv5 – Published: 2026-04-13 07:15 – Updated: 2026-04-14 03:55

Title

Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration

Summary

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

Severity

7.2 (High)


                        
                          CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-13 00:00 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

palo_alto CNA under the mitre root

CNA scorecard A 95/100 over 96 records in the last 180 days details

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0234	vendor-advisory

Impacted products

2 products

Vendor	Product	Version	CPE status
Palo Alto Networks	Cortex XSOAR Microsoft Teams Marketplace	Affected: 1.5.0 , < 1.5.52 (custom) cpe:2.3:a:palo_alto_networks:cortex_xsoar_microsoft_teams_marketplace::::::::
Palo Alto Networks	Cortex XSIAM Microsoft Teams Marketplace	Affected: 1.5.0 , < 1.5.52 (custom) cpe:2.3:a:palo_alto_networks:cortex_xsiam_microsoft_teams_marketplace::::::::

Date Public

2026-04-08 16:00

Credits

quinn

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0234",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-14T03:55:44.286Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XSOAR Microsoft Teams Marketplace",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.5.52",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.5.52",
              "status": "affected",
              "version": "1.5.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XSIAM Microsoft Teams Marketplace",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.5.52",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.5.52",
              "status": "affected",
              "version": "1.5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xsoar_microsoft_teams_marketplace:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.5.52",
                  "versionStartIncluding": "1.5.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xsiam_microsoft_teams_marketplace:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.5.52",
                  "versionStartIncluding": "1.5.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "quinn"
        }
      ],
      "datePublic": "2026-04-08T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eAn improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.\u0026nbsp;\u003c/span\u003e"
            }
          ],
          "value": "An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-475",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-475 Signature Spoofing by Improper Validation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "RED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347 Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T07:15:03.667Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0234"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003eCortex XSOAR Microsoft Teams Marketplace 1.5\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e1.5.0 through 1.5.51\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 1.5.52 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003eCortex XSIAM Microsoft Teams Marketplace 1.5\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e1.5.0 through 1.5.51\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 1.5.52 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                Cortex XSOAR Microsoft Teams Marketplace 1.5\n\n                                1.5.0 through 1.5.51\n                                Upgrade to 1.5.52 or later.\n                            \n                                Cortex XSIAM Microsoft Teams Marketplace 1.5\n\n                                1.5.0 through 1.5.51\n                                Upgrade to 1.5.52 or later."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-04-08T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.0",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.1",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.2",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.3",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.4",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.5",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.6",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.7",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.8",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.9",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.10",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.11",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.12",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.13",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.14",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.15",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.16",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.17",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.18",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.19",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.20",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.21",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.22",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.23",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.24",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.25",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.26",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.27",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.28",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.29",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.30",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.31",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.32",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.33",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.34",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.35",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.36",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.37",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.38",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.39",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.40",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.41",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.42",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.43",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.44",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.45",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.46",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.47",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.48",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.49",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.50",
        "Cortex XSOAR Microsoft Teams Marketplace 1.5.51",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.0",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.1",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.2",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.3",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.4",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.5",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.6",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.7",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.8",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.9",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.10",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.11",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.12",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.13",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.14",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.15",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.16",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.17",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.18",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.19",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.20",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.21",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.22",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.23",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.24",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.25",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.26",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.27",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.28",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.29",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.30",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.31",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.32",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.33",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.34",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.35",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.36",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.37",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.38",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.39",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.40",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.41",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.42",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.43",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.44",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.45",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.46",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.47",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.48",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.49",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.50",
        "Cortex XSIAM Microsoft Teams Marketplace 1.5.51"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0234",
    "datePublished": "2026-04-13T07:15:03.667Z",
    "dateReserved": "2025-11-03T20:43:55.337Z",
    "dateUpdated": "2026-04-14T03:55:44.286Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-0234",
      "date": "2026-11-01",
      "epss": "0.00231",
      "percentile": "0.1404"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Cortex XSOAR Microsoft Teams Marketplace",
                "vendor": "Palo Alto Networks",
                "versions": [
                  {
                    "changes": [
                      {
                        "at": "1.5.52",
                        "status": "unaffected"
                      }
                    ],
                    "lessThan": "1.5.52",
                    "status": "affected",
                    "version": "1.5.0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "Cortex XSIAM Microsoft Teams Marketplace",
                "vendor": "Palo Alto Networks",
                "versions": [
                  {
                    "changes": [
                      {
                        "at": "1.5.52",
                        "status": "unaffected"
                      }
                    ],
                    "lessThan": "1.5.52",
                    "status": "affected",
                    "version": "1.5.0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "psirt@paloaltonetworks.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsiam:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E801A883-959E-4752-8F35-EEDFD5089969",
                    "versionEndExcluding": "1.5.52",
                    "versionStartIncluding": "1.5.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9E8A4503-1D45-42F8-A5BD-068BB42418CF",
                    "versionEndExcluding": "1.5.52",
                    "versionStartIncluding": "1.5.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources."
          },
          {
            "lang": "es",
            "value": "Una vulnerabilidad de verificaci\u00f3n incorrecta de firma criptogr\u00e1fica existe en las plataformas Cortex XSOAR y Cortex XSIAM durante la integraci\u00f3n de Microsoft Teams que permite a un usuario no autenticado acceder y modificar recursos protegidos."
          }
        ],
        "id": "CVE-2026-0234",
        "lastModified": "2026-10-26T21:10:00.170",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.2,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NO",
                "Recovery": "USER",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "HIGH",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "UNREPORTED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "RED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "DIFFUSE",
                "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "MODERATE"
              },
              "source": "psirt@paloaltonetworks.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-0234",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-13T00:00:00+00:00",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-04-13T08:16:22.367",
        "references": [
          {
            "source": "psirt@paloaltonetworks.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://security.paloaltonetworks.com/CVE-2026-0234"
          }
        ],
        "sourceIdentifier": "psirt@paloaltonetworks.com",
        "vulnStatus": "Undergoing Analysis",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-347"
              }
            ],
            "source": "psirt@paloaltonetworks.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2026-04-14T07:22:33+00:00",
      "cve": "CVE-2026-0234",
      "id": "CVE-2026-0234",
      "initial_release_date": "2026-04-08T16:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-0234.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-0234",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-04-13T13:41:42.790884Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-04-13T13:42:30.408Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Cortex XSOAR Microsoft Teams Marketplace",
              "vendor": "Palo Alto Networks",
              "versions": [
                {
                  "changes": [
                    {
                      "at": "1.5.52",
                      "status": "unaffected"
                    }
                  ],
                  "lessThan": "1.5.52",
                  "status": "affected",
                  "version": "1.5.0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "Cortex XSIAM Microsoft Teams Marketplace",
              "vendor": "Palo Alto Networks",
              "versions": [
                {
                  "changes": [
                    {
                      "at": "1.5.52",
                      "status": "unaffected"
                    }
                  ],
                  "lessThan": "1.5.52",
                  "status": "affected",
                  "version": "1.5.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xsoar_microsoft_teams_marketplace:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "1.5.52",
                      "versionStartIncluding": "1.5.0",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                },
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:palo_alto_networks:cortex_xsiam_microsoft_teams_marketplace:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "1.5.52",
                      "versionStartIncluding": "1.5.0",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ],
              "operator": "OR"
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "quinn"
            }
          ],
          "datePublic": "2026-04-08T16:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cspan\u003eAn improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.\u0026nbsp;\u003c/span\u003e"
                }
              ],
              "value": "An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources."
            }
          ],
          "exploits": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
                }
              ],
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-475",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-475 Signature Spoofing by Improper Validation"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NO",
                "Recovery": "USER",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "HIGH",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 7.2,
                "baseSeverity": "HIGH",
                "exploitMaturity": "UNREPORTED",
                "privilegesRequired": "NONE",
                "providerUrgency": "RED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "DIFFUSE",
                "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "MODERATE"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-347",
                  "description": "CWE-347 Improper Verification of Cryptographic Signature",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-04-13T07:15:03.667Z",
            "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
            "shortName": "palo_alto"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://security.paloaltonetworks.com/CVE-2026-0234"
            }
          ],
          "solutions": [
            {
              "lang": "eng",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                \u003ctd\u003eCortex XSOAR Microsoft Teams Marketplace 1.5\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e1.5.0 through 1.5.51\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 1.5.52 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003ctr\u003e\n                                \u003ctd\u003eCortex XSIAM Microsoft Teams Marketplace 1.5\u003cbr\u003e\u003c/td\u003e\n                                \u003ctd\u003e1.5.0 through 1.5.51\u003c/td\u003e\n                                \u003ctd\u003eUpgrade to 1.5.52 or later.\u003c/td\u003e\n                            \u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
                }
              ],
              "value": "Version\nMinor Version\nSuggested Solution\n\n                                Cortex XSOAR Microsoft Teams Marketplace 1.5\n\n                                1.5.0 through 1.5.51\n                                Upgrade to 1.5.52 or later.\n                            \n                                Cortex XSIAM Microsoft Teams Marketplace 1.5\n\n                                1.5.0 through 1.5.51\n                                Upgrade to 1.5.52 or later."
            }
          ],
          "source": {
            "discovery": "EXTERNAL"
          },
          "timeline": [
            {
              "lang": "en",
              "time": "2026-04-08T16:00:00.000Z",
              "value": "Initial Publication"
            }
          ],
          "title": "Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration",
          "workarounds": [
            {
              "lang": "eng",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "No known workarounds exist for this issue."
                }
              ],
              "value": "No known workarounds exist for this issue."
            }
          ],
          "x_affectedList": [
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.0",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.1",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.2",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.3",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.4",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.5",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.6",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.7",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.8",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.9",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.10",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.11",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.12",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.13",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.14",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.15",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.16",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.17",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.18",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.19",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.20",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.21",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.22",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.23",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.24",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.25",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.26",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.27",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.28",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.29",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.30",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.31",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.32",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.33",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.34",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.35",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.36",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.37",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.38",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.39",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.40",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.41",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.42",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.43",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.44",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.45",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.46",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.47",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.48",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.49",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.50",
            "Cortex XSOAR Microsoft Teams Marketplace 1.5.51",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.0",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.1",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.2",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.3",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.4",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.5",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.6",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.7",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.8",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.9",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.10",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.11",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.12",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.13",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.14",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.15",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.16",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.17",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.18",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.19",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.20",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.21",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.22",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.23",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.24",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.25",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.26",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.27",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.28",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.29",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.30",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.31",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.32",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.33",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.34",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.35",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.36",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.37",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.38",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.39",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.40",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.41",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.42",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.43",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.44",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.45",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.46",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.47",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.48",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.49",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.50",
            "Cortex XSIAM Microsoft Teams Marketplace 1.5.51"
          ],
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "assignerShortName": "palo_alto",
        "cveId": "CVE-2026-0234",
        "datePublished": "2026-04-13T07:15:03.667Z",
        "dateReserved": "2025-11-03T20:43:55.337Z",
        "dateUpdated": "2026-04-14T03:55:44.286Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2026-05158 (CVE-2026-0234)

Vulnerability from fstec – Published: 2026-04-14 – Updated: 2026-04-14 – View on bdu.fstec.ru Fixed

Title

Уязвимость пакета интеграции Microsoft Teams платформ безопасности Cortex XSOAR и Cortex XSIAM, связанная с неправильной проверкой криптографической подписи, позволяющая нарушителю получить доступ на чтение и изменение данных

Summary

Уязвимость пакета интеграции Microsoft Teams платформ безопасности Cortex XSOAR и Cortex XSIAM связана с неправильной проверкой криптографической подписи. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ на чтение и изменение данных

Severity

7.6 (High) CVSS 2.0


                      
                        AV:N/AC:H/Au:N/C:C/I:C/A:C

8.1 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 (High) CVSS 4.0


                      
                        CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Spoofing

Incidents

Being clarified

Remediation

Software update

CWE

CWE-347 - Некорректная проверка криптографической подписи

Aliases

CVE-2026-0234

References

1 reference

URL
https://security.paloaltonetworks.com/CVE-2026-0234

Impacted products

1 product from 1 vendor

Vendors

Palo Alto Networks Inc.

Products

Microsoft Teams

Versions

до 1.5.52 (Microsoft Teams)

Product types

Application software

Mitigations

Использование рекомендаций: https://security.paloaltonetworks.com/CVE-2026-0234

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": "AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Palo Alto Networks Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 1.5.52 (Microsoft Teams)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://security.paloaltonetworks.com/CVE-2026-0234",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "08.04.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "14.04.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "14.04.2026",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2026-05158",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2026-0234",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Microsoft Teams",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u0430 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 Microsoft Teams \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Cortex XSOAR \u0438 Cortex XSIAM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (CWE-347)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u0430 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 Microsoft Teams \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Cortex XSOAR \u0438 Cortex XSIAM \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://security.paloaltonetworks.com/CVE-2026-0234",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-347",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,1)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)"
}

CERTFR-2026-AVI-0412

Vulnerability from certfr_avis - Published: 2026-04-09 - Updated: 2026-04-09

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Palo Alto Networks	N/A	Cortex XSIAM Microsoft Teams Marketplace versions 1.5.x antérieures à 1.5.52
Palo Alto Networks	Cortex XDR Agent	Cortex XDR Agent sans CU-2120 sur Windows versions 8.3-CE sans les derniers correctifs de sécurité
Palo Alto Networks	N/A	Cortex XSOAR Microsoft Teams Marketplace versions 1.5.x antérieures à 1.5.52
Palo Alto Networks	Cortex XDR Agent	Cortex XDR Agent sans CU-2120 sur Windows versions 7.9-CE sans les derniers correctifs de sécurité
Palo Alto Networks	Cortex XDR Agent	Cortex XDR Agent sans CU-2120 sur Windows versions 8.7-CE antérieures à 8.7.101-CE
Palo Alto Networks	N/A	Autonomous Digital Experience Manager pour Windows versions 5.10.x antérieures à 5.10.4
Palo Alto Networks	Cortex XDR Agent	Cortex XDR Agent sans CU-2120 sur Windows versions 9.0.x antérieures à 9.0.1
Palo Alto Networks	Prisma Access Browser	Prisma Browser versions antérieures à 146.3.8.76
Palo Alto Networks	Cortex XDR Agent	Cortex XDR Agent versions 8.9.x antérieures à 8.9.1

References

Title

Publication Time

FKIE_CVE-2026-0234

Vulnerability from fkie_nvd - Published: 2026-04-13 08:16 - Updated: 2026-10-26 21:10

Severity

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

References

	URL	Tags
	psirt@paloaltonetworks.com	https://security.paloaltonetworks.com/CVE-2026-0234	Vendor Advisory

Impacted products

	Vendor	Product	Version
	paloaltonetworks	cortex_xsiam	*
	paloaltonetworks	cortex_xsoar	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XSOAR Microsoft Teams Marketplace",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.5.52",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.5.52",
              "status": "affected",
              "version": "1.5.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cortex XSIAM Microsoft Teams Marketplace",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "1.5.52",
                  "status": "unaffected"
                }
              ],
              "lessThan": "1.5.52",
              "status": "affected",
              "version": "1.5.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "psirt@paloaltonetworks.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsiam:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E801A883-959E-4752-8F35-EEDFD5089969",
              "versionEndExcluding": "1.5.52",
              "versionStartIncluding": "1.5.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xsoar:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E8A4503-1D45-42F8-A5BD-068BB42418CF",
              "versionEndExcluding": "1.5.52",
              "versionStartIncluding": "1.5.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de verificaci\u00f3n incorrecta de firma criptogr\u00e1fica existe en las plataformas Cortex XSOAR y Cortex XSIAM durante la integraci\u00f3n de Microsoft Teams que permite a un usuario no autenticado acceder y modificar recursos protegidos."
    }
  ],
  "id": "CVE-2026-0234",
  "lastModified": "2026-10-26T21:10:00.170",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NO",
          "Recovery": "USER",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "HIGH",
          "attackRequirements": "PRESENT",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 7.2,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "UNREPORTED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "RED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "DIFFUSE",
          "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "MODERATE"
        },
        "source": "psirt@paloaltonetworks.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-0234",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-04-13T00:00:00+00:00",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-04-13T08:16:22.367",
  "references": [
    {
      "source": "psirt@paloaltonetworks.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security.paloaltonetworks.com/CVE-2026-0234"
    }
  ],
  "sourceIdentifier": "psirt@paloaltonetworks.com",
  "vulnStatus": "Undergoing Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-347"
        }
      ],
      "source": "psirt@paloaltonetworks.com",
      "type": "Secondary"
    }
  ]
}

GHSA-W48X-MVPF-JFC3

Vulnerability from github – Published: 2026-04-13 09:31 – Updated: 2026-07-07 18:30

Details

Severity

9.1 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

7.2 (High)


                  
                    CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-0234"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-347"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-04-13T08:16:22Z",
    "severity": "HIGH"
  },
  "details": "An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.",
  "id": "GHSA-w48x-mvpf-jfc3",
  "modified": "2026-07-07T18:30:26Z",
  "published": "2026-04-13T09:31:33Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0234"
    },
    {
      "type": "WEB",
      "url": "https://security.paloaltonetworks.com/CVE-2026-0234"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red",
      "type": "CVSS_V4"
    }
  ]
}

WID-SEC-W-2026-1017

Vulnerability from csaf_certbund - Published: 2026-04-08 22:00 - Updated: 2026-04-12 22:00

Summary

Palo Alto Networks Cortex XSOAR (Microsoft Teams Marketplace): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Severity

Hoch

Scope

1 vulnerability in this advisory, including CVE-2026-0234.

CVE-2026-0234

Known affected: 1 product

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-0234 (GCVE-0-2026-0234)

BDU:2026-05158 (CVE-2026-0234)

CERTFR-2026-AVI-0412

Solutions

FKIE_CVE-2026-0234

GHSA-W48X-MVPF-JFC3

WID-SEC-W-2026-1017

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour