Commvault

Commvault

24 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-77106

  • EPSS 0.27%
  • Veröffentlicht 08.09.2026 12:12:55
  • Zuletzt bearbeitet 11.09.2026 14:26:44

Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents,...

8.8

CVE-2026-77105

  • EPSS 0.18%
  • Veröffentlicht 08.09.2026 12:12:54
  • Zuletzt bearbeitet 09.09.2026 15:52:59

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server.

7.5

CVE-2026-77104

  • EPSS 0.37%
  • Veröffentlicht 08.09.2026 12:12:54
  • Zuletzt bearbeitet 09.09.2026 15:57:00

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.

7.5

CVE-2026-77103

  • EPSS 0.29%
  • Veröffentlicht 08.09.2026 12:12:54
  • Zuletzt bearbeitet 09.09.2026 15:56:34

CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.

7.5

CVE-2026-77102

  • EPSS 0.27%
  • Veröffentlicht 08.09.2026 12:12:54
  • Zuletzt bearbeitet 09.09.2026 15:55:47

CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.

7.5

CVE-2026-77101

  • EPSS 0.27%
  • Veröffentlicht 08.09.2026 12:12:54
  • Zuletzt bearbeitet 09.09.2026 15:55:36

CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.

9.8

CVE-2026-77098

  • EPSS 0.23%
  • Veröffentlicht 08.09.2026 12:12:53
  • Zuletzt bearbeitet 11.09.2026 14:19:39

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

8.2

CVE-2026-77097

  • EPSS 0.31%
  • Veröffentlicht 08.09.2026 12:12:53
  • Zuletzt bearbeitet 11.09.2026 14:20:07

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

9.8

CVE-2026-77092

  • EPSS 0.16%
  • Veröffentlicht 08.09.2026 12:12:53
  • Zuletzt bearbeitet 11.09.2026 14:22:39

Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor.

7.8

CVE-2026-77091

  • EPSS 0.13%
  • Veröffentlicht 08.09.2026 12:12:53
  • Zuletzt bearbeitet 11.09.2026 14:24:13

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store.