Commvault security advisories, September 2026

Every Commvault security advisory published in September 2026, from Commvault Cloud Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 12
Critical: 1
High: 10
In CISA KEV: 0
CVEs: 11

Commvault advisories published in September 2026

Sep 1, 2026
Critical [CVE-2026-77089] Command Center API Authentication Bypass
Critical9.3
Sep 1, 2026
High [CVE-2026-77103] CommServe Information Disclosure
High8.7
Sep 1, 2026
High [CVE-2026-77091] DataCube Security Feature Bypass
High8.5
Sep 1, 2026
High [CVE-2026-77106] Cvlaunchd Code Execution
High7.7
Sep 1, 2026
High [CVE-2026-77105] CommServe Privilege Escalation
High8.7
Sep 1, 2026
High [CVE-2026-77104] CommServe Path Traversal
High8.3
Sep 1, 2026
High [CVE-2026-77102] CommServe Denial of Service
High8.7
Sep 1, 2026
High [CVE-2026-77101] CommServe Stack-based Buffer Overflow
High8.7
Sep 1, 2026
High [CVE-2026-77098] Private Metrics Server SQL Injection
High8.8
Sep 1, 2026
High [CVE-2026-77097] Private Metrics Server Denial of Service
High8.8
Sep 1, 2026
High [CVE-2026-77092] Content Extractor Privilege Escalation
High7.3
Sep 1, 2026
Medium Content Extractor Information Disclosure
Medium6.8

Get an email when Commvault publishes the next one.

See Commvault's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Commvault

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.