CVE-2026-0234CWE-347

Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration

High · published April 13, 2026

CVSS v4.0
7.2
EPSS
0%
Percentile
13.2
In the wild
Unconfirmed
What it is

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.

The record
Technical detail
CVSS v4.0
7.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red
EPSS
0.00231 · 13.2th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-04-13T07:15Z
EPSS history
Timeline
  • 13 APR 07:15Z
    Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
    cvelistv5