CVE-2026-77089

9.3

Critical

Published:8 Sep 2026

Last updated:11 Sep 2026

Source:050066fd-a2f9-4f32-ab5d-4c53f48bc333

Analyzed

Weakness (CWE)

CWE-290CWE-290

CVSS Vector

v4.0

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Confidentiality (Vulnerable): High
Integrity (Vulnerable): High
Availability (Vulnerable): High
Confidentiality (Subsequent): None
Integrity (Subsequent): None
Availability (Subsequent): None

View on MITRE Find PoC on GitHub

Description

Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center.

References

050066fd-a2f9-4f32-ab5d-4c53f48bc333

https://documentation.commvault.com/securityadvisories/CV_2026_07_1.html