CVE-2026-77106

Published: Sep 8, 2026Modified: Sep 11, 2026

7.7

Vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: 050066fd-a2f9-4f32-ab5d-4c53f48bc333 (Secondary)

Description

Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.

Affected (4)

Products: Commvault: Commvault

Commvault

1 product

Commvault

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Commvault Commvault	11.36.0 ≤ version < 11.36.123
Commvault Commvault	11.40.0 ≤ version < 11.40.72
Commvault Commvault	11.44.0 ≤ version < 11.44.20
Commvault Commvault	11.46.0 ≤ version < 11.46.20

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (1)

https://documentation.commvault.com/securityadvisories/CV_2026_08_8.html

Source: 050066fd-a2f9-4f32-ab5d-4c53f48bc333

Vendor Advisory

Timeline

No history available yet.