CVE-2026-77104
HighCVSS 8.3Summary
CommServe contained a path traversal issue affecting information disclosure. Software customers should upgrade to the resolved maintenance release. Update CommServe.
Risk Assessment
Path traversal vulnerability may allow an attacker to read sensitive files outside the allowed directory, leading to information disclosure.
Recommendation
It is recommended to update CommServe to the latest resolved maintenance release.
Other vulnerabilities in CommServe
See all- CVE-2026-77105High
CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers should upgrade to the resolved maintenance release. Update CommServe and Web Server.
- CVE-2026-77103High
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers should upgrade to the resolved maintenance release. Update CommServe.
- CVE-2026-77102High
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers should upgrade to the resolved maintenance release. Update CommServe.
- CVE-2026-77101High
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers should upgrade to the resolved maintenance release. Update CommServe.
- CVE-2026-13738Critical
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Customers should upgrade to the resolved maintenance release.
- CVE-2026-13737Critical
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Customers should upgrade to the resolved maintenance release.
Original NVD description (English source)
CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.