CVE-2026-77105

8.7

High

Published:8 Sep 2026

Last updated:9 Sep 2026

Source:050066fd-a2f9-4f32-ab5d-4c53f48bc333

Analyzed

Weakness (CWE)

CWE-347CWE-347

CVSS Vector

v4.0

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: Low
User Interaction: None
Confidentiality (Vulnerable): High
Integrity (Vulnerable): High
Availability (Vulnerable): High
Confidentiality (Subsequent): None
Integrity (Subsequent): None
Availability (Subsequent): None

View on MITRE Find PoC on GitHub

Description

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server.

References

050066fd-a2f9-4f32-ab5d-4c53f48bc333

https://documentation.commvault.com/securityadvisories/CV_2026_08_7.html