SSRF in Commvault Cloud
CVE-2026-13739
A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Comman…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Commvault Cloud — versions 11.46.0, 11.44.0, 11.40.0