CVE-2026-13739 | BDVDB-2026-357250 Detail
CommvaultCommvault Cloud
Description#
A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center.
Impact#
Per CVSS v4.0: confidentiality impact high, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-918 Server-Side Request Forgery (SSRF)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.