Cortex XSOAR vulnerabilities

2 known vulnerabilities in Cortex XSOAR from Palo Alto Networks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cortex XSOAR: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-0270Jun 10, 2026Palo Alto Networks

  A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) a

• 9.1 Critical severity

  Cortex XSOAR Microsoft Teams Marketplace: Improper Verification of Cryptographic Signature

  CVE-2026-0234Apr 13, 2026Palo Alto Networks

  An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources.