CVE-2026-77089 – Commvault Cloud
CVSS 9.8
CRITICAL
[2] Critical – Same Day Deployment
“When the front door to your backups stops checking IDs, every copy of your data is up for grabs.”
Commvault has released a maintenance update for Commvault Cloud that closes an authentication bypass in the Command Center API. The flaw affects privilege management, so an attacker can get past authentication controls that protect administrative functions. CVE-2026-77089 has a CVSS score of 9.3, Critical severity.
Commvault Cloud manages backup and recovery data, so a compromised Command Center puts the organization's last line of defense at risk. Customers running the software should upgrade Command Center to the resolved maintenance release.
Key Details
- Affected Product
- Commvault Commvault
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-290
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.