Skip to content
OpenAdvisories
High · 8.8 CVE-2026-77098 EUVD-2026-72726GHSA-r875-7v32-3fqx

Private Metrics Server SQL Injection

Published Sep 8, 2026 · Updated Sep 8, 2026 · Assigned by Commvault

Description

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Affected products

VendorProductAffectedFixed
Commvault Commvault Cloud 11.46.0 – ≤ 11.46.19, 11.44.0 – ≤ 11.44.19, 11.40.0 – ≤ 11.40.71, 11.36.0 – ≤ 11.36.122 —

References