Commvault: >> Commvault >> 11.46.0 Security Vulnerabilities
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.
CVSS Score
8.7
EPSS Score
0.005
Published
2026-09-08
A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-08-11
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
CVSS Score
9.2
EPSS Score
0.005
Published
2026-08-11
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
CVSS Score
9.2
EPSS Score
0.006
Published
2026-08-11
Page 2