Source: Ministry of education information & communication security contingency platform
"" "" ""
| Publication Number | TACERT-ANA-2026041002044949 | Publication Time | 2026/04/10 14:35 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2026/04/10 14:35 |
| Impact Level | Low | ||
| [Subject] 【Vulnerability Alert】 A Critical Security Vulnerability Exists in Palo Alto Cortex XSIAM / XSOAR (CVE-2026-0234) |
|||
| [Content] Forwarded from TWCERTCC-200-202604-00000010 Recently, Palo Alto Networks released a critical security advisory (CVE-2026-0234, CVSS: 8.8). When Cortex XSOAR and Cortex XSIAM are integrated with Microsoft Teams, an improper cryptographic signature vulnerability exists, which may allow an unauthenticated attacker to access or tamper with protected resources. (Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] Cortex XSIAM Microsoft Teams Marketplace versions earlier than 1.5.52 (excluding 1.5.52) Cortex XSOAR Microsoft Teams Marketplace versions earlier than 1.5.52 (excluding 1.5.52) |
|||
| [Recommended Actions] Cortex XSIAM Microsoft Teams Marketplace version 1.5.52 or later (inclusive) Cortex XSOAR Microsoft Teams Marketplace version 1.5.52 or later (inclusive) |
|||
| [Reference] https://www.twcert.org.tw/tw/cp-169-10830-9aaae-1.html |
|||