CVE-2026-77097 — Private Metrics Server Denial of Service

CVE-2026-77097

Private Metrics Server Denial of Service PUBLISHED

Description (CNA)

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Affected (CNA)

Vendor / product	Versions
Commvault / Commvault Cloud	affected 11.46.0 through 11.46.19; affected 11.44.0 through 11.44.19; affected 11.40.0 through 11.40.71; affected 11.36.0 through 11.36.122

CWE

No CWE identifiers supplied.

References

https://documentation.commvault.com/securityadvisories/CV_2026_08_1.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.