CVE-2026-0234 | Palo Alto Cortex XSOAR Microsoft Teams Marketplace up to 1.5.51 signature verification (EUVD-2026-21899)

VDB-357103 · CVE-2026-0234 · EUVD-2026-21899 PALO ALTO CORTEX XSOAR MICROSOFT TEAMS MARKETPLACE UP TO 1.5.51 SIGNATURE VERIFICATION HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.4 $0-$5k 2.54 Summaryinfo A vulnerability was found in Palo Alto Cortex XSOAR Microsoft Teams Marketplace and Cortex XSIAM Microsoft Teams Marketplace up to 1.5.51. It has been classified as problematic. Affected is an unknown function. This manipulation causes signature verification. This vulnerability appears as CVE-2026-0234. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended. Detailsinfo A vulnerability classified as problematic was found in Palo Alto Cortex XSOAR Microsoft Teams Marketplace and Cortex XSIAM Microsoft Teams Marketplace up to 1.5.51. Affected by this vulnerability is an unknown code block. The manipulation with an unknown input leads to a signature verification vulnerability. The CWE definition for the vulnerability is CWE-347. The product does not verify, or incorrectly verifies, the cryptographic signature for data. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is: An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources. The weakness was presented by quinn. It is possible to read the advisory at security.paloaltonetworks.com. This vulnerability is known as CVE-2026-0234 since 11/03/2025. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. Upgrading to version 1.5.52 eliminates this vulnerability. The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-21899). Productinfo Type Unified Communication Software Vendor Palo Alto Name Cortex XSIAM Microsoft Teams Marketplace Cortex XSOAR Microsoft Teams Marketplace Version 1.5.0 1.5.1 1.5.2 1.5.3 1.5.4 1.5.5 1.5.6 1.5.7 1.5.8 1.5.9 1.5.10 1.5.11 1.5.12 1.5.13 1.5.14 1.5.15 1.5.16 1.5.17 1.5.18 1.5.19 1.5.20 1.5.21 1.5.22 1.5.23 1.5.24 1.5.25 1.5.26 1.5.27 1.5.28 1.5.29 1.5.30 1.5.31 1.5.32 1.5.33 1.5.34 1.5.35 1.5.36 1.5.37 1.5.38 1.5.39 1.5.40 1.5.41 1.5.42 1.5.43 1.5.44 1.5.45 1.5.46 1.5.47 1.5.48 1.5.49 1.5.50 1.5.51 License commercial Website Vendor: https://www.paloaltonetworks.com/ CPE 2.3info 🔒 🔒 🔒 CPE 2.2info 🔒 🔒 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA CVSS-B Score: 🔒 CNA CVSS-BT Score: 🔒 CNA Vector: 🔒 CVSSv3info VulDB Meta Base Score: 5.6 VulDB Meta Temp Score: 5.4 VulDB Base Score: 5.6 VulDB Temp Score: 5.4 VulDB Vector: 🔒 VulDB Reliability: 🔍 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Signature verification CWE: CWE-347 / CWE-345 CAPEC: 🔒 ATT&CK: 🔒 Physical: No Local: No Remote: Yes Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: Cortex XSOAR Microsoft Teams Marketplace/Cortex XSIAM Microsoft Teams Marketplace 1.5.52 Timelineinfo 11/03/2025 CVE reserved 04/13/2026 +160 days Advisory disclosed 04/13/2026 +0 days VulDB entry created 04/13/2026 +0 days VulDB entry last update Sourcesinfo Vendor: paloaltonetworks.com Advisory: security.paloaltonetworks.com Researcher: quinn Status: Confirmed CVE: CVE-2026-0234 (🔒) GCVE (CVE): GCVE-0-2026-0234 GCVE (VulDB): GCVE-100-357103 EUVD: 🔒 Entryinfo Created: 04/13/2026 10:06 Updated: 04/13/2026 13:09 Changes: 04/13/2026 10:06 (73), 04/13/2026 13:09 (1) Complete: 🔍 Cache ID: 99:137:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸