CVE-2026-0274

Vulnerability

An improper validation of credentials vulnerability exists in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM. This issue affects versions 1.1.0 through 1.1.9 of the CommvaultSecurityIQ Marketplace integration for both Cortex XSOAR and Cortex XSIAM. No special configuration is required for the vulnerability to be exposed [1].

Exploitation

An unauthenticated attacker can exploit this vulnerability by leveraging the network attack vector. No user interaction, special privileges, or specific attack requirements are needed. The vulnerability is exploitable remotely and is automatable [1].

Impact

Successful exploitation allows an unauthenticated attacker to access and modify protected resources. This leads to a high impact on product confidentiality, integrity, and availability [1].

Mitigation

CommvaultSecurityIQ Marketplace versions 1.2.0 and later contain a fix for this vulnerability. Users are advised to upgrade to version 1.2.0 or later for both Cortex XSOAR and Cortex XSIAM. No known workarounds exist [1].