CVSS 9.8 (critical) · published 2026-08-11
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Affected products (NVD): commvault commvault
Fixed in (NVD): 11.36.114, 11.40.63, 11.44.11, 11.46.10
Weakness: CWE-863
Source: NVD CVE-2026-13737
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.