CVE Catalog
CVE-2026-13737
CriticalCVSS 9.2Summary
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Customers should upgrade to the resolved maintenance release.
Risk Assessment
Allowlist bypass may allow unauthorized command execution, potentially leading to system security compromise.
Recommendation
Update all Commvault installations, including CommServe, Webserver, Command Center, Media Agents, Clients, and HyperScale X, to the patched version.
Original NVD description (English source)
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.