CVE-2026-0274

CRITICAL

Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration

Title source: cna
STIX 2.1

Description

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory
https://security.paloaltonetworks.com/CVE-2026-0274

Scores

CVSS v3 9.1
EPSS 0.0029
EPSS Percentile 20.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-1390
Status published
Products (4)
Palo Alto Networks/Cortex XSIAM CommvaultSecurityIQ Marketplace 1.1.0 - 1.2.0
Palo Alto Networks/Cortex XSOAR CommvaultSecurityIQ Marketplace 1.1.0 - 1.2.0
paloaltonetworks/cortex_xsiam_commvaultsecurityiq_marketplace 1.1.0
paloaltonetworks/cortex_xsoar_commvaultsecurityiq_marketplace 1.1.0
Published Jun 10, 2026
Tracked Since Jun 11, 2026