1. Home
  2. CVE Database
  3. CVE-2026-0274
CRITICAL · 9.1

CVE-2026-0274

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources...

Vulnerability Description

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
PaloaltonetworksCortex Xsiam Commvaultsecurityiq Marketplace1.1.0
PaloaltonetworksCortex Xsoar Commvaultsecurityiq Marketplace1.1.0

Related Weaknesses (CWE)

CWE-1390

References

FAQ

What is CVE-2026-0274?

CVE-2026-0274 is a vulnerability with a CVSS score of 9.1 (CRITICAL). An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources...

How severe is CVE-2026-0274?

CVE-2026-0274 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-0274?

Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Cortex Xsiam Commvaultsecurityiq Marketplace, Paloaltonetworks Cortex Xsoar Commvaultsecurityiq Marketplace.