CVE Catalog
CVE-2026-13738
CriticalCVSS 9.2Summary
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Customers should upgrade to the resolved maintenance release.
Risk Assessment
Authorization bypass may allow unauthorized users to execute commands, potentially leading to unauthorized system access.
Recommendation
Update all Commvault installations, including CommServe, Webserver, Command Center, Media Agents, Clients, and HyperScale X, to the patched version.
Original NVD description (English source)
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.