CVE-2026-77098 — Private Metrics Server SQL Injection

CVE-2026-77098

Private Metrics Server SQL Injection PUBLISHED

Description (CNA)

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Affected (CNA)

Vendor / product	Versions
Commvault / Commvault Cloud	affected 11.46.0 through 11.46.19; affected 11.44.0 through 11.44.19; affected 11.40.0 through 11.40.71; affected 11.36.0 through 11.36.122

CWE

No CWE identifiers supplied.

References

https://documentation.commvault.com/securityadvisories/CV_2026_08_2.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.