Skip to content
OpenAdvisories
High · 8.8 CVE-2026-77097 EUVD-2026-72725GHSA-wxg5-wf9r-p36g

Private Metrics Server Denial of Service

Published Sep 8, 2026 · Updated Sep 8, 2026 · Assigned by Commvault

Description

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Affected products

VendorProductAffectedFixed
Commvault Commvault Cloud 11.46.0 – ≤ 11.46.19, 11.44.0 – ≤ 11.44.19, 11.40.0 – ≤ 11.40.71, 11.36.0 – ≤ 11.36.122 —

References