[CVE-2026-0274] An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Corte…

Descripción técnica

An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

Puntuación CVSS

Score: 9.1/10 — Severidad: CRITICAL — Estado NIST: Undergoing Analysis

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Productos afectados

Cortex xsiam commvaultsecurityiq marketplace, Cortex xsoar commvaultsecurityiq marketplace — Paloaltonetworks

Debilidades (CWE)

CWE-1390

Fuente oficial

Publicado en NIST NVD.