CVSS 9.8 (critical) · published 2026-08-11
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Affected products (NVD): commvault commvault
Fixed in (NVD): 11.36.114, 11.40.63, 11.44.11, 11.46.10
Weakness: CWE-863
Source: NVD CVE-2026-13738
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.