CVE-2026-77099: Commvault Cloud 11.46.0 through 11.46.29; status changes: 11.46.30 — unaffected, 11.44.0 through 11.44.24; status…

Affected technology

Commvault Cloud · 11.46.0 through 11.46.29; status changes: 11.46.30 — unaffected, 11.44.0 through 11.44.24; status changes: 11.44.25 — unaffected, 11.40.0 through 11.40.77; status changes: 11.40.78 — unaffected, 11.36.0 through 11.36.126; status changes: 11.36.127 — unaffected
Commvault

Grid(HSX) CVFS · 5.0.1.0 through 5.0.14.4; status changes: 5.0.14.5 — unaffected
Commvault

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.