CVE-2026-0274

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - psirt@paloaltonetworks.com

Published

2026-06-10

Last modified

2026-06-12

Weaknesses

CWE-1390

Affected products

• Cortex Xsiam Commvaultsecurityiq Marketplace (Palo Alto Networks)
• Cortex Xsoar Commvaultsecurityiq Marketplace (Palo Alto Networks)
• Cortex Xsiam Commvaultsecurityiq Marketplace (Paloaltonetworks)
• Cortex Xsoar Commvaultsecurityiq Marketplace (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2026-0274