CVE-2026-77103
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers should upgrade to the resolved maintenance release. Update CommServe.
Risk Assessment
Authentication bypass may allow unauthorized access to the system and sensitive data, posing a serious security threat.
Recommendation
It is recommended to immediately update CommServe to the latest resolved maintenance release.
Other vulnerabilities in CommServe
See all- CVE-2026-13738Critical
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Customers should upgrade to the resolved maintenance release.
- CVE-2026-13737Critical
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Customers should upgrade to the resolved maintenance release.
- CVE-2026-77105High
CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers should upgrade to the resolved maintenance release. Update CommServe and Web Server.
- CVE-2026-77104High
CommServe contained a path traversal issue affecting information disclosure. Software customers should upgrade to the resolved maintenance release. Update CommServe.
- CVE-2026-77102High
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers should upgrade to the resolved maintenance release. Update CommServe.
- CVE-2026-77101High
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers should upgrade to the resolved maintenance release. Update CommServe.
Original NVD description (English source)
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS