Skip to content
VulniPulse
Sign in
Advisory severityHigh7.7Commvault

High [CVE-2026-77096] CVFS Missing Authentication

This high-severity Commvault advisory covers CVE-2026-77096 affecting Commvault Cloud.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CV_2026_10_7 Source published

VulniPulse record published

CVE-2026-77096
Affected products & platforms
CommvaultCommvault Cloud (Metallic)
Open source advisory

Android app · Google Play

Monitor future Commvault CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release.

Update CVFS.CVSS score: 7.7 Commvault Software To view version support lifecyle, see Commvault software releases, release types, and release tracks. Supported versions not listed are unaffected.

Unsupported versions must be upgraded.

Product Platforms Affected Versions Resolved Version Status Commvault Linux 11.46.0 - 11.46.39 11.46.40 and higher Resolved Commvault Linux 11.44.0 - 11.44.24 11.44.25 and higher Resolved Commvault Linux 11.40.0 - 11.40.77 11.40.78 and higher Resolved Commvault Linux 11.36.0 - 11.36.126 11.36.127 and higher Resolved Grid(HSX) CVFS Linux 5.0.1.0 - 5.0.14.4 5.0.14.5 and higher Resolved

Affected product named by the advisory: Commvault Cloud.

Affected versions
  • Affected Versions
  • 11.46.0 - 11.46.39
  • 11.44.0 - 11.44.24
  • 11.40.0 - 11.40.77
  • 11.36.0 - 11.36.126
  • 5.0.1.0 - 5.0.14.4

Official advisory · high-confidence parse· fetched 12 hours ago·verify at source

Fixed versions
  • 11.46.40
  • 11.44.25
  • 11.40.78
  • 11.36.127
  • 5.0.14

Official advisory · high-confidence parse· fetched 12 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Install the listed maintenance release (or a more recent one) for your feature release: 11.46.40, 11.44.25, 11.40.78, 11.36.127, 5.0.14.

Official advisory · high-confidence parse· fetched 12 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.