CVE-2026-13738
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.55%
- 44th pct
- KEV
- No
- Class
- other
- CWE-863
Description
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
References
Status: profiled · ingested 2026-09-11T18:00:14.000Z