CVE-2026-77096: Commvault Cloud 11.46.0 through 11.46.39; status changes: 11.46.40 — unaffected, 11.44.0 through 11.44.24; status…

Affected technology

Commvault Cloud · 11.46.0 through 11.46.39; status changes: 11.46.40 — unaffected, 11.44.0 through 11.44.24; status changes: 11.44.25 — unaffected, 11.40.0 through 11.40.77; status changes: 11.40.78 — unaffected, 11.36.0 through 11.36.126; status changes: 11.36.127 — unaffected
Commvault

Grid(HSX) CVFS · 5.0.1.0 through 5.0.14.4; status changes: 5.0.14.5 — unaffected
Commvault

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 7.7/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.