CVE-2026-77105
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers should upgrade to the resolved maintenance release. Update CommServe and Web Server.
Risk Assessment
Signature verification issues may allow an attacker to manipulate privileges or bypass security, potentially leading to unauthorized access.
Recommendation
It is recommended to update CommServe and Web Server to the latest resolved maintenance release.
Other vulnerabilities in CommServe
See all- CVE-2026-13738Critical
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Customers should upgrade to the resolved maintenance release.
- CVE-2026-13737Critical
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Customers should upgrade to the resolved maintenance release.
- CVE-2026-77104High
CommServe contained a path traversal issue affecting information disclosure. Software customers should upgrade to the resolved maintenance release. Update CommServe.
- CVE-2026-77103High
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers should upgrade to the resolved maintenance release. Update CommServe.
- CVE-2026-77102High
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers should upgrade to the resolved maintenance release. Update CommServe.
- CVE-2026-77101High
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers should upgrade to the resolved maintenance release. Update CommServe.
Original NVD description (English source)
CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS