VULNERABILITY INTELLIGENCE

CVE-2026-0234

CVSS score9.1 CRITICAL
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-04-13
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-347

Primary references