CVE-2026-13737 | BDVDB-2026-357248 Detail
CommvaultCommvault Cloud
Description#
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Impact#
Per CVSS v4.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.
Weaknesses#
- CWE-863 Incorrect Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.