DeutschShown in its original language — a full translation is planned for a future version.
Commvault Backup & Recovery: Mehrere Schwachstellen
view advisory published 2026-08-11
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Commvault Backup & Recovery ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen und serverseitige Request-Forgery-Angriffe durchzuführen
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-13739US | critical9.8 | — | ||
A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software custom… | ||||
| CVE-2026-13738US | critical9.8OT elevated | — | ||
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Upd… | ||||
| CVE-2026-13737US | critical9.8OT elevated | — | ||
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault i… | ||||
02
references
External citations — patches, advisories, analysis.
- Commvault Advisory CV_2026_07_5 vom 2026-08-11external
- Commvault Advisory CV_2026_07_8 vom 2026-08-11external
- EUVD Security Advisory vom 2026-08-11external
- EUVD Security Advisory vom 2026-08-11external
- EUVD Security Advisory vom 2026-08-11external
- GitHub Security Advisory GHSA-xxcx-v673-pwpr vom 2026-08-11external
- WID-SEC-W-2026-2767 - CSAF Versionself
- WID-SEC-2026-2767 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan