CVE-2026-0274Disclosure(paloaltonetworks / cortex_xsiam_commvaultsecurityiq_marketplace)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch paloaltonetworks cortex_xsiam_commvaultsecurityiq_marketplace systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

paloaltonetworks CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://security.paloaltonetworks.com/CVE-2026-0274

Weakness type (CWE)

CWE-1390

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

cortex_xsiam_commvaultsecurityiq_marketplace
cortex_xsoar_commvaultsecurityiq_marketplace

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-06-11); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

paloaltonetworks

Products

cortex_xsiam_commvaultsecurityiq_marketplacecortex_xsoar_commvaultsecurityiq_marketplace

1 version affected across 2 products

Deep dive

Activity timeline3 mentions / 2d

Signal classification3 categories

Disclosure

133.3%

Patch

133.3%

General

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-11	2	Disclosure1Patch1
2026-06-25	1	General1

Full discourse3 posts

Autumn Good@autumn_good_35137d
Disclosure
⚠️⚠️⚠️ 『allows an unauthenticated attacker to access and modify protected resources.』 CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration https://security.paloaltonetworks.com/CVE-2026-0274
Post summary
The advisory announces CVE‑2026‑0274, an unauthenticated credential validation flaw in Cortex XSOAR’s CommvaultSecurityIQ integration that can allow attackers to access and modify protected resources.
00010367
6.9K followersView on X
CERT-PY@CERTpy123d
General
⚠️ Vulnerabilidad en productos Palo Alto ❗ CVE-2026-0274 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-palo-alto-3/ https://t.co/VdQPBUNhPG
Post summary
The tweet alerts that a CVE (CVE‑2026‑0274) affects Palo Alto products and provides a link for additional information.
00000324
6.7K followersView on X
CCB Alert@CCBalert137d
Patch
Warning: Palo Alto released security updates to address several vulnerabilities affecting Palo Alto Cortex and PAN-OS. CVE-2026-0274 (CVSS 9.1) is an improper validation of credentials, allowing an unauthenticated attacker to access and modify protected resources. #Patch #Patch
Post summary
Palo Alto has issued patch updates for CVE-2026-0274, a high‑severity credential validation flaw (CVSS 9.1) that permits unauthenticated modification of protected resources.
00000187
7.2K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	paloaltonetworks	cortex_xsiam_commvaultsecurityiq_marketplace	1.1.0	-	-
App	paloaltonetworks	cortex_xsoar_commvaultsecurityiq_marketplace	1.1.0	-	-

Explore more

Back to dashboard paloaltonetworks CVEs cortex_xsiam_commvaultsecurityiq_marketplace vulnerabilities