CVE-2026-0274

8.1 highEPSS 0.3%

High (8.1) in paloaltonetworks. EPSS 0.3% chance of exploitation in the next 30 days.

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

Severity

CVSS 4.0

8.1 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Red

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-1390
Published: 2026-06-10
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19

Affected

paloaltonetworks:cortex_xsiam_commvaultsecurityiq_marketplace
paloaltonetworks:cortex_xsoar_commvaultsecurityiq_marketplace

References

https://security.paloaltonetworks.com/CVE-2026-0274

Check your stack JSON