8.1 HighCWE-1390
CVE-2026-0274
Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration
Palo Alto NetworksCortex XSIAM CommvaultSecurityIQ Marketplace
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 20% of scored CVEs
SeverityCVSS
8.1High
Description NVD
An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.
Coverage 1 article · 1 outlet
- Palo Alto fixes Cortex flaw: Splunk patches Enterprise bugSecurityWeek · first in our coverage