Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-77099 EUVD-2026-98761GHSA-96p4-48xx-h4f4

CVFS Command Execution

Published Oct 13, 2026 · Updated Oct 14, 2026 · Assigned by Commvault

Description

CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

Affected products

VendorProductAffectedFixed
Commvault Commvault Cloud 11.46.0 – ≤ 11.46.29, 11.44.0 – ≤ 11.44.24, 11.40.0 – ≤ 11.40.77, 11.36.0 – ≤ 11.36.126 —
Commvault Grid(HSX) CVFS 5.0.1.0 – ≤ 5.0.14.4 —

References