CVE-2026-77098

CRÍTICO 9.8CVE-2026-77098 · Published 08/09/2026 · updated 11/09/2026

En resumen

CVE-2026-77098 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a commvault (commvault).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.47%, mayor que el 40.5% de las vulnerabilidades.
Solución: actualizar a 11.36.123, 11.40.72, 11.44.20, 11.46.20 o posterior.

Package	Affected versions	Patched versions
commvault commvault	`≥ 11.36.0, < 11.36.123≥ 11.40.0, < 11.40.72≥ 11.44.0, < 11.44.20≥ 11.46.0, < 11.46.20`	`11.36.12311.40.7211.44.2011.46.20`

Description

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

References

documentation.commvault.com/securityadvisories/CV_2026_08_2.html · Vendor Advisory

Más vulnerabilidades de commvault

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

commvault

≥ 11.36.0, < 11.36.123≥ 11.40.0, < 11.40.72≥ 11.44.0, < 11.44.20≥ 11.46.0, < 11.46.20

11.36.12311.40.7211.44.2011.46.20

Más vulnerabilidades de commvault

Ver todo →