Palo Alto Networks Cortex XSOAR und CommvaultSecurityIQ Marketplace: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 8.1
  CVE-2026-0274

  Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration

  An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

  Palo Alto Networks Cortex XSOAR CommvaultSecurityIQ Marketplace Cortex XSIAM CommvaultSecurityIQ Marketplace Network devices
  Jun 10, 2026
• Medium 4.8
  CVE-2026-0270

  Cortex XSOAR: Path Traversal Vulnerability

  A path traversal vulnerability in Palo Alto Networks Cortex XSOAR engine software running on Linux allows an unauthenticated attacker on an adjacent network, with the ability to intercept and manipulate network response traffic via a man-in-the-middle (MITM) …

  Palo Alto Networks Cortex XSOAR Network devices
  Jun 10, 2026

Revision history

1. 2026-06-10 #1

   Initiale Fassung

References

• Palo Alto Networks Security Advisory vom 2026-06-10
  https://security.paloaltonetworks.com/CVE-2026-0274
• Palo Alto Networks Security Advisory vom 2026-06-10
  https://security.paloaltonetworks.com/CVE-2026-0270