CC
Product
Commvault Cloud
24
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 7High 17Medium 0Low 0
Watch
Add Commvault Cloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77098 | 9.8 | Sep 8 | Private Metrics Server SQL Injection Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-77092 | 9.8 | Sep 8 | Content Extractor Privilege Escalation Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-77089 | 9.8 | Sep 8 | Command Center API Authentication Bypass Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-13738 | 9.8 | Aug 11 | Improper Authorization Validation Affected: 11.46.0 through 11.46.9; 11.44.0 through 11.44.10; 11.40.0 through 11.40.62; 11.36.0 through 11.36.113 |
| CVE-2026-13737 | 9.8 | Aug 11 | Command Restriction Bypass Affected: 11.46.0 through 11.46.9; 11.44.0 through 11.44.10; 11.40.0 through 11.40.62; 11.36.0 through 11.36.113 |
| CVE-2026-13739 | 9.8 | Aug 11 | Server-Side Request Forgery (SSRF) Affected: 11.46.0 through 11.46.9; 11.44.0 through 11.44.10; 11.40.0 through 11.40.62; 11.36.0 through 11.36.113 |
| CVE-2026-77099 | 9.3 | Oct 13 | CVFS Command Execution Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-77106 | 8.8 | Sep 8 | Cvlaunchd Code Execution Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-77105 | 8.8 | Sep 8 | CommServe Privilege Escalation Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-97334 | 8.7 | Oct 13 | Network messaging layer decompression resource exhaustion Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-77100 | 8.7 | Oct 13 | MediaAgent Denial of Service Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-77090 | 8.7 | Oct 13 | CVFS Information Disclosure Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-77097 | 8.2 | Sep 8 | Private Metrics Server Denial of Service Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-77091 | 7.8 | Sep 8 | DataCube Security Feature Bypass Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-77096 | 7.7 | Oct 13 | CVFS Missing Authentication Affected: 11.46.0 through 11.46.39; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-77104 | 7.5 | Sep 8 | CommServe Path Traversal Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-77103 | 7.5 | Sep 8 | CommServe Information Disclosure Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-77102 | 7.5 | Sep 8 | CommServe Denial of Service Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-77101 | 7.5 | Sep 8 | CommServe Stack-based Buffer Overflow Affected: 11.46.0 through 11.46.19; 11.44.0 through 11.44.19; 11.40.0 through 11.40.71; 11.36.0 through 11.36.122 |
| CVE-2026-97333 | 7.1 | Oct 13 | QAPI stack-based buffer overflow Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-77095 | 7.1 | Oct 13 | CvFWD Null Pointer Dereference Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-77094 | 7.1 | Oct 13 | CvFWD Out-of-Bounds Write Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-77093 | 7.1 | Oct 13 | CvFWD Denial of Service Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
| CVE-2026-18228 | 7.1 | Oct 13 | Hyperscale Path Traversal Affected: 11.46.0 through 11.46.29; 11.44.0 through 11.44.24; 11.40.0 through 11.40.77; 11.36.0 through 11.36.126 |
Showing 24