CVE-2026-13738

EPSS 0.53%
Veröffentlicht 11.08.2026 11:01:39
Zuletzt bearbeitet 11.09.2026 14:25:13
Erkennungen
Login

Improper Authorization Validation

CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations.  Software customers upgrade to resolved maintenance release.  Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 4 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Commvault ≫ Commvault Version >= 11.36.0 < 11.36.114

Commvault ≫ Commvault Version >= 11.40.0 < 11.40.63

Commvault ≫ Commvault Version >= 11.44.0 < 11.44.11

Commvault ≫ Commvault Version >= 11.46.0 < 11.46.10

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.53%	0.419

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
050066fd-a2f9-4f32-ab5d-4c53f48bc333	9.2	0	0	CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://documentation.commvault.com/securityadvisories/CV_2026_07_9.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-13738

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-13738

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-13738

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-13738