← CVE Intelligence

CVE-2026-13738

Improper Authorization Validation PUBLISHED

Description (CNA)

CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.

Affected (CNA)

Vendor / productVersions
Commvault / Commvault Cloudaffected 11.46.0 through 11.46.9; affected 11.44.0 through 11.44.10; affected 11.40.0 through 11.40.62; affected 11.36.0 through 11.36.113

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.