60
CVE-2026-0274
—CVSS 4.0
8.1 high
EPSS
<1%p21
Published
()
Modified
Description
An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.
- Vendors
- paloaltonetworks
- Products
- cortex xsiam commvaultsecurityiq marketplace, cortex xsoar commvaultsecurityiq marketplace
- Weakness
- CWE-1390
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Red