CVE-2026-0274 — Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration

CVE-2026-0274

Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration PUBLISHED

Description (CNA)

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Cortex XSIAM CommvaultSecurityIQ Marketplace	affected 1.1.0 before 1.2.0
Palo Alto Networks / Cortex XSOAR CommvaultSecurityIQ Marketplace	affected 1.1.0 before 1.2.0

CWE

CWE-1390

References

https://security.paloaltonetworks.com/CVE-2026-0274

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.