Commvault Commvault Cloud
14 CVEs affecting Commvault Commvault Cloud. Latest disclosed: 2026-09-08. Critical: 6, High: 8.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-77098 | Critical | 9.8 | 2026-09-08 | Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update P… |
CVE-2026-77092 | Critical | 9.8 | 2026-09-08 | Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance releas… |
CVE-2026-77089 | Critical | 9.8 | 2026-09-08 | Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update… |
CVE-2026-13739 | Critical | 9.8 | 2026-08-11 | A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target U… |
CVE-2026-13738 | Critical | 9.8 | 2026-08-11 | CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved main… |
CVE-2026-13737 | Critical | 9.8 | 2026-08-11 | CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. U… |
CVE-2026-77106 | High | 8.8 | 2026-09-08 | Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update… |
CVE-2026-77105 | High | 8.8 | 2026-09-08 | CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Up… |
CVE-2026-77097 | High | 8.2 | 2026-09-08 | Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade… |
CVE-2026-77091 | High | 7.8 | 2026-09-08 | DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Ex… |
CVE-2026-77104 | High | 7.5 | 2026-09-08 | CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe. |
CVE-2026-77103 | High | 7.5 | 2026-09-08 | CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenanc… |
CVE-2026-77102 | High | 7.5 | 2026-09-08 | CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommS… |
CVE-2026-77101 | High | 7.5 | 2026-09-08 | CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Comm… |