Palo Alto Networks Cortex Xsoar vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Palo Alto Networks Cortex Xsoar: 2 record(s), with affected versions and fixes.
cpe:2.3:a:paloaltonetworks:cortex_xsoar

CVE-2026-0270 High · 7.5 CWE-22 Jun 10, 2026

Cortex XSOAR: Path Traversal Vulnerability

A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) attack, to write arbitrary files to the host.

CVE-2026-0234 Critical · 9.1 CWE-347 Apr 13, 2026

Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration

An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.