This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-13739 | BDVDB-2026-357250 Detail

CommvaultCommvault Cloud

Description#

A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-918 Server-Side Request Forgery (SSRF)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.