CVE-2026-0274: Palo Alto Networks Cortex Xsiam Commvaultsecurityiq Marketplace

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

Affected products

• Palo Alto Networks Cortex Xsiam Commvaultsecurityiq Marketplace: version 1.1.0 only
• Palo Alto Networks Cortex Xsoar Commvaultsecurityiq Marketplace: version 1.1.0 only

Published 2026-06-10. Last modified 2026-07-23.