Skip to content
OpenAdvisories
High WID-SEC-2026-2767 3 CVEs

Commvault Backup & Recovery: Mehrere Schwachstellen

Published Aug 11, 2026 · Updated Aug 11, 2026 · de-DE

Vendor: Commvault Product: Backup & Recovery Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Commvault Backup & Recovery ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen und serverseitige Request-Forgery-Angriffe durchzuführen

Product

Commvault Backup & Recovery ist eine Plattform, die eine vollständige Sicherung und Wiederherstellung aller Workloads ermöglicht.

Vulnerabilities 3

  • Critical 9.2
    CVE-2026-13737

    Command Restriction Bypass

    CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clie…

    Commvault Commvault Cloud
  • Critical 9.2
    CVE-2026-13738

    Improper Authorization Validation

    CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, …

    Commvault Commvault Cloud
  • High 8.8
    CVE-2026-13739

    Server-Side Request Forgery (SSRF)

    A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center.

    Commvault Commvault Cloud

Revision history

  1. #1

    Initiale Fassung

References