{"id":"CVE-2026-77090","title":"CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure","summary":"CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure.  Software customers upgrade to resolved maintenance release. Update CVFS.","severity":"none","published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T15:17:48.887","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77090","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_07_4.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333"}],"tags":["nvd"],"ingestedAt":"2026-10-13T15:33:40.081Z","slug":"CVE-2026-77090","body":"## Overview\n\nCVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure.  Software customers upgrade to resolved maintenance release. Update CVFS.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}