Dashboard / CVE-2026-0234

CVE-2026-0234

HIGH
MEDIUM Priority: 0.02 BB Relevance: 64/100
Published: 2026-04-13 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: None
S: X
AT: Present
VC: High
VI: High
VA: High

Description

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
paloaltonetworks cortex_xsiam 1.5.0 – 1.5.52
paloaltonetworks cortex_xsoar 1.5.0 – 1.5.52

References & Advisories (1)

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ No authentication
✓ No user interaction

CVSS Score

7.2 / 10.0 v4.0
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red

EPSS — Exploitation Probability

0.23%
Raw Score 0.002310
Percentile 14.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00231
2026-10-28
0.00231

Intelligence Sources

nvd ref →

External Links