Auth bypass in Commvault Cloud

CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Vulnerability class: Broken Authentication

Affected products

Weakness classification (CWE)

References