PT-2026-48559 · Palo Alto Networks · Cortex Xsiam Commvaultsecurityiq Marketplace+1

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-0274

Mitre

CVSS v4.0

8.1

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

Fix

Weakness Enumeration

CWE-1390

Related Identifiers

CVE-2026-0274

Affected Products

Cortex Xsiam Commvaultsecurityiq Marketplace

Cortex Xsoar Commvaultsecurityiq Marketplace

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-0274 · Security Note
• https://security.paloaltonetworks.com/CVE-2026-0274 · Vendor Advisory