{"id":"CVE-2026-77102","title":"CommServe contained a heap-based buffer overflow issue affecting service availability","summary":"CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-122"],"vendor":"commvault","product":"commvault","affected":["commvault >= 11.36.0, < 11.36.123","commvault >= 11.40.0, < 11.40.72","commvault >= 11.44.0, < 11.44.20","commvault >= 11.46.0, < 11.46.20"],"patched":["commvault 11.46.20"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:55:47.400","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77102","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_08_4.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-08T13:24:19.978501Z"},"scores":{"nvd":7.5,"cna":8.7},"ingestedAt":"2026-09-08T15:33:26.984Z","epss":0.00267,"epssPercentile":0.19037,"slug":"CVE-2026-77102","body":"## Overview\n\nCommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe.\n\n## Affected\n\n- `commvault >= 11.36.0, < 11.36.123`\n- `commvault >= 11.40.0, < 11.40.72`\n- `commvault >= 11.44.0, < 11.44.20`\n- `commvault >= 11.46.0, < 11.46.20`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `commvault 11.46.20`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201924,"id":"CVE-2026-77102","ts":1789399986906,"field":"cvss","old":"8.7","new":"7.5"},{"seq":200654,"id":"CVE-2026-77102","ts":1789397562699,"field":"cvss","old":"7.5","new":"8.7"},{"seq":199361,"id":"CVE-2026-77102","ts":1789395472372,"field":"cvss","old":"8.7","new":"7.5"},{"seq":198606,"id":"CVE-2026-77102","ts":1789392166740,"field":"cvss","old":"7.5","new":"8.7"},{"seq":198561,"id":"CVE-2026-77102","ts":1789392092776,"field":"cvss","old":"8.7","new":"7.5"},{"seq":196352,"id":"CVE-2026-77102","ts":1789383734894,"field":"cvss","old":"7.5","new":"8.7"},{"seq":195281,"id":"CVE-2026-77102","ts":1789380554452,"field":"cvss","old":"8.7","new":"7.5"},{"seq":194068,"id":"CVE-2026-77102","ts":1789378659111,"field":"cvss","old":"7.5","new":"8.7"},{"seq":192855,"id":"CVE-2026-77102","ts":1789376488328,"field":"cvss","old":"8.7","new":"7.5"},{"seq":191642,"id":"CVE-2026-77102","ts":1789373581406,"field":"cvss","old":"7.5","new":"8.7"},{"seq":190427,"id":"CVE-2026-77102","ts":1789369428003,"field":"cvss","old":"8.7","new":"7.5"},{"seq":189214,"id":"CVE-2026-77102","ts":1789368355354,"field":"cvss","old":"7.5","new":"8.7"},{"seq":187997,"id":"CVE-2026-77102","ts":1789365208318,"field":"cvss","old":"8.7","new":"7.5"},{"seq":186784,"id":"CVE-2026-77102","ts":1789363436782,"field":"cvss","old":"7.5","new":"8.7"},{"seq":185570,"id":"CVE-2026-77102","ts":1789361192454,"field":"cvss","old":"8.7","new":"7.5"},{"seq":184357,"id":"CVE-2026-77102","ts":1789358300153,"field":"cvss","old":"7.5","new":"8.7"},{"seq":182608,"id":"CVE-2026-77102","ts":1789354298316,"field":"cvss","old":"8.7","new":"7.5"},{"seq":181401,"id":"CVE-2026-77102","ts":1789353262611,"field":"cvss","old":"7.5","new":"8.7"},{"seq":180194,"id":"CVE-2026-77102","ts":1789350253131,"field":"cvss","old":"8.7","new":"7.5"},{"seq":178987,"id":"CVE-2026-77102","ts":1789348250015,"field":"cvss","old":"7.5","new":"8.7"},{"seq":177780,"id":"CVE-2026-77102","ts":1789346351479,"field":"cvss","old":"8.7","new":"7.5"},{"seq":176573,"id":"CVE-2026-77102","ts":1789343154154,"field":"cvss","old":"7.5","new":"8.7"},{"seq":174690,"id":"CVE-2026-77102","ts":1789334847799,"field":"cvss","old":"8.7","new":"7.5"},{"seq":173485,"id":"CVE-2026-77102","ts":1789333637336,"field":"cvss","old":"7.5","new":"8.7"},{"seq":172299,"id":"CVE-2026-77102","ts":1789331073864,"field":"cvss","old":"8.7","new":"7.5"},{"seq":171113,"id":"CVE-2026-77102","ts":1789328735690,"field":"cvss","old":"7.5","new":"8.7"},{"seq":169908,"id":"CVE-2026-77102","ts":1789327137660,"field":"cvss","old":"8.7","new":"7.5"},{"seq":168703,"id":"CVE-2026-77102","ts":1789323793792,"field":"cvss","old":"7.5","new":"8.7"},{"seq":167498,"id":"CVE-2026-77102","ts":1789319663904,"field":"cvss","old":"8.7","new":"7.5"},{"seq":166293,"id":"CVE-2026-77102","ts":1789318721199,"field":"cvss","old":"7.5","new":"8.7"},{"seq":165088,"id":"CVE-2026-77102","ts":1789315769496,"field":"cvss","old":"8.7","new":"7.5"},{"seq":163883,"id":"CVE-2026-77102","ts":1789313590204,"field":"cvss","old":"7.5","new":"8.7"},{"seq":162678,"id":"CVE-2026-77102","ts":1789311882236,"field":"cvss","old":"8.7","new":"7.5"},{"seq":161473,"id":"CVE-2026-77102","ts":1789308680118,"field":"cvss","old":"7.5","new":"8.7"},{"seq":159586,"id":"CVE-2026-77102","ts":1789300451920,"field":"cvss","old":"8.7","new":"7.5"},{"seq":156575,"id":"CVE-2026-77102","ts":1789294723463,"field":"cvss","old":"7.5","new":"8.7"},{"seq":155370,"id":"CVE-2026-77102","ts":1789292913890,"field":"cvss","old":"8.7","new":"7.5"},{"seq":154165,"id":"CVE-2026-77102","ts":1789289749499,"field":"cvss","old":"7.5","new":"8.7"},{"seq":152815,"id":"CVE-2026-77102","ts":1789281653341,"field":"cvss","old":"8.7","new":"7.5"},{"seq":152455,"id":"CVE-2026-77102","ts":1789281224514,"field":"cvss","old":"7.5","new":"8.7"},{"seq":151416,"id":"CVE-2026-77102","ts":1789277607495,"field":"cvss","old":"8.7","new":"7.5"},{"seq":150377,"id":"CVE-2026-77102","ts":1789276209958,"field":"cvss","old":"7.5","new":"8.7"},{"seq":149344,"id":"CVE-2026-77102","ts":1789273803788,"field":"cvss","old":"8.7","new":"7.5"},{"seq":148311,"id":"CVE-2026-77102","ts":1789271294424,"field":"cvss","old":"7.5","new":"8.7"},{"seq":146343,"id":"CVE-2026-77102","ts":1789269357694,"field":"cvss","old":"8.7","new":"7.5"},{"seq":145148,"id":"CVE-2026-77102","ts":1789266305298,"field":"cvss","old":"7.5","new":"8.7"},{"seq":144052,"id":"CVE-2026-77102","ts":1789262586171,"field":"cvss","old":"8.7","new":"7.5"},{"seq":142956,"id":"CVE-2026-77102","ts":1789261486082,"field":"cvss","old":"7.5","new":"8.7"},{"seq":141787,"id":"CVE-2026-77102","ts":1789258811203,"field":"cvss","old":"8.7","new":"7.5"},{"seq":140628,"id":"CVE-2026-77102","ts":1789256700669,"field":"cvss","old":"7.5","new":"8.7"}]}