CVE-2026-13737
CVE-2026-13737: 1 tracked advisory record across Commvault. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Commvault
1 advisory- Advisory severityCritical9.2
Critical [CVE-2026-13737] Command Restriction Bypass
CV_2026_07_8Source published
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release.CVSS score: 9.2 Commvault Software To view version support lifecyle, see Commvault software releases, release types, and release tracks. Versions not listed are out of support or unaffected. Product Platforms Affected Versions Resolved Version Status Commvault Linux, Windows 11.46.0 - 11.46.9 11.46.10 and above Resolved Commvault Linux, Windows 11.44.0 - 11.44.10 11.44.11 and above Resolved Commvault Linux, Windows 11.40.0 - 11.40.62 11.40.63 and above Resolved Commvault Linux, Windows 11.36.0 - 11.36.113 11.36.114 and above Resolved Affected product named by the advisory: Commvault Cloud.
- Affected products in this advisory
- Commvault Cloud
- Source-reported affected versions
- Affected Versions
- 11.46.0 - 11.46.9
- 11.44.0 - 11.44.10
- 11.40.0 - 11.40.62
1 more entries in the full advisory.
- Source-reported fixed versions
- 11.46.10
- 11.44.11
- 11.40.63
- 11.36.114
- Mitigation guidance
- Install the listed maintenance release (or a more recent one) for your feature release: 11.46.10, 11.44.11, 11.40.63, 11.36.114.
Android app · Google Play
Monitor future Commvault CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.