Skip to content
OpenAdvisories
High · 7.7 CVE-2026-77096 EUVD-2026-98760GHSA-4p62-vj8p-fqvf

CVFS Missing Authentication

Published Oct 13, 2026 · Updated Oct 14, 2026 · Assigned by Commvault

Description

CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

Affected products

VendorProductAffectedFixed
Commvault Commvault Cloud 11.46.0 – ≤ 11.46.39, 11.44.0 – ≤ 11.44.24, 11.40.0 – ≤ 11.40.77, 11.36.0 – ≤ 11.36.126 —
Commvault Grid(HSX) CVFS 5.0.1.0 – ≤ 5.0.14.4 —

References