CVE-2026-77104

HighCVSS 7.5

Published: 08/09/2026(UTC)Updated: 09/09/2026(UTC)Translated: 08/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

CommServe contained a path traversal issue affecting information disclosure. Software customers should upgrade to the resolved maintenance release. Update CommServe.

Risk Assessment

Path traversal vulnerability may allow an attacker to read sensitive files outside the allowed directory, leading to information disclosure.

Recommendation

It is recommended to update CommServe to the latest resolved maintenance release.

Other vulnerabilities in CommServe

See all

CVE-2026-13738Critical
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Customers should upgrade to the resolved maintenance release.
CVE-2026-13737Critical
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Customers should upgrade to the resolved maintenance release.
CVE-2026-77105High
CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers should upgrade to the resolved maintenance release. Update CommServe and Web Server.
CVE-2026-77103High
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers should upgrade to the resolved maintenance release. Update CommServe.
CVE-2026-77102High
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers should upgrade to the resolved maintenance release. Update CommServe.
CVE-2026-77101High
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers should upgrade to the resolved maintenance release. Update CommServe.

Original NVD description (English source)

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS