CVE-2026-77091

8.5

High

Published:8 Sep 2026

Last updated:11 Sep 2026

Source:050066fd-a2f9-4f32-ab5d-4c53f48bc333

Analyzed

Weakness (CWE)

CWE-22Path Traversal

CVSS Vector

v4.0

Attack Vector: Local
Attack Complexity: Low
Attack Requirements: None
Privileges Required: Low
User Interaction: None
Confidentiality (Vulnerable): High
Integrity (Vulnerable): High
Availability (Vulnerable): High
Confidentiality (Subsequent): None
Integrity (Subsequent): None
Availability (Subsequent): None

View on MITRE Find PoC on GitHub

Description

DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store.

References

050066fd-a2f9-4f32-ab5d-4c53f48bc333

https://documentation.commvault.com/securityadvisories/CV_2026_07_3.html