CVE Catalog
CVE-2026-0274
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
An improper validation of credentials vulnerability in the Commvault SecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.
Risk Assessment
An attacker could gain unauthorized access to protected data and modify it, potentially compromising the entire SOAR/SIEM platform.
Recommendation
Apply the Commvault patch for the SecurityIQ integration or temporarily disable the integration until updated.
Original NVD description (English source)
An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.