CVE-2026-13737 — Command Restriction Bypass
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvaul…
Published: 2026-08-11 · CVSS: 9.2 · CVSS 4.0
CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7