PT-2026-31611 · Palo Alto Networks+1 · Cortex Xsoar+2

Quinn · Published 2026-04-08 · Updated 2026-04-25 · CVE-2026-0234

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Cortex XSOAR and Cortex XSIAM versions prior to 1.5.52

Description A flaw in the Microsoft Teams integration for Cortex XSOAR and Cortex XSIAM allows attackers to access and modify sensitive data without authentication. The integration improperly inspects digital passports, enabling attackers to forge signatures and bypass security checks. This does not require a valid username, password, or network privileges.

Recommendations Update to version 1.5.52 or later.

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2026-05158

CVE-2026-0234

Affected Products

Cortex Xsiam

Cortex Xsoar

Teams

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-0234 · Security Note
• https://bdu.fstec.ru/vul/2026-05158 · Security Note
• https://security.paloaltonetworks.com/CVE-2026-0234 · Vendor Advisory
• https://twitter.com/threatcluster/status/2042213569077346554 · Twitter Post
• https://twitter.com/integ_sec/status/2045838595177533802 · Twitter Post
• https://twitter.com/SystemTek_UK/status/2048125313939353852 · Twitter Post
• https://twitter.com/CyberEdition/status/2042195835040252265 · Twitter Post
• https://twitter.com/CVEnew/status/2043733062329217387 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2043691211798573381 · Twitter Post
• https://twitter.com/The_Cyber_News/status/2042457040988356712 · Twitter Post
• https://twitter.com/UndercodeUpdate/status/2042445765486710808 · Twitter Post