CVE-2026-77104: Commvault

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.

Affected products

• Commvault Commvault: from 11.36.0, before 11.36.123 (fixed in 11.36.123); from 11.40.0, before 11.40.72 (fixed in 11.40.72); from 11.44.0, before 11.44.20 (fixed in 11.44.20); from 11.46.0, before 11.46.20 (fixed in 11.46.20)

Published 2026-09-08. Last modified 2026-09-09.