{"id":"CVE-2026-77103","title":"CommServe contained an authentication bypass issue affecting access authorization and information disclosure","summary":"CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-288"],"vendor":"commvault","product":"commvault","affected":["commvault >= 11.36.0, < 11.36.123","commvault >= 11.40.0, < 11.40.72","commvault >= 11.44.0, < 11.44.20","commvault >= 11.46.0, < 11.46.20"],"patched":["commvault 11.46.20"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:56:34.583","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77103","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_08_5.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-08T13:23:49.319206Z"},"scores":{"nvd":7.5,"cna":8.7},"ingestedAt":"2026-09-08T15:33:26.984Z","epss":0.00289,"epssPercentile":0.21742,"slug":"CVE-2026-77103","body":"## Overview\n\nCommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.\n\n## Affected\n\n- `commvault >= 11.36.0, < 11.36.123`\n- `commvault >= 11.40.0, < 11.40.72`\n- `commvault >= 11.44.0, < 11.44.20`\n- `commvault >= 11.46.0, < 11.46.20`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `commvault 11.46.20`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201925,"id":"CVE-2026-77103","ts":1789399986914,"field":"cvss","old":"8.7","new":"7.5"},{"seq":200655,"id":"CVE-2026-77103","ts":1789397562706,"field":"cvss","old":"7.5","new":"8.7"},{"seq":199362,"id":"CVE-2026-77103","ts":1789395472386,"field":"cvss","old":"8.7","new":"7.5"},{"seq":198607,"id":"CVE-2026-77103","ts":1789392166747,"field":"cvss","old":"7.5","new":"8.7"},{"seq":198562,"id":"CVE-2026-77103","ts":1789392092783,"field":"cvss","old":"8.7","new":"7.5"},{"seq":196353,"id":"CVE-2026-77103","ts":1789383734900,"field":"cvss","old":"7.5","new":"8.7"},{"seq":195282,"id":"CVE-2026-77103","ts":1789380554460,"field":"cvss","old":"8.7","new":"7.5"},{"seq":194069,"id":"CVE-2026-77103","ts":1789378659118,"field":"cvss","old":"7.5","new":"8.7"},{"seq":192856,"id":"CVE-2026-77103","ts":1789376488334,"field":"cvss","old":"8.7","new":"7.5"},{"seq":191643,"id":"CVE-2026-77103","ts":1789373581415,"field":"cvss","old":"7.5","new":"8.7"},{"seq":190428,"id":"CVE-2026-77103","ts":1789369428010,"field":"cvss","old":"8.7","new":"7.5"},{"seq":189215,"id":"CVE-2026-77103","ts":1789368355360,"field":"cvss","old":"7.5","new":"8.7"},{"seq":187998,"id":"CVE-2026-77103","ts":1789365208325,"field":"cvss","old":"8.7","new":"7.5"},{"seq":186785,"id":"CVE-2026-77103","ts":1789363436789,"field":"cvss","old":"7.5","new":"8.7"},{"seq":185571,"id":"CVE-2026-77103","ts":1789361192461,"field":"cvss","old":"8.7","new":"7.5"},{"seq":184358,"id":"CVE-2026-77103","ts":1789358300160,"field":"cvss","old":"7.5","new":"8.7"},{"seq":182609,"id":"CVE-2026-77103","ts":1789354298322,"field":"cvss","old":"8.7","new":"7.5"},{"seq":181402,"id":"CVE-2026-77103","ts":1789353262618,"field":"cvss","old":"7.5","new":"8.7"},{"seq":180195,"id":"CVE-2026-77103","ts":1789350253137,"field":"cvss","old":"8.7","new":"7.5"},{"seq":178988,"id":"CVE-2026-77103","ts":1789348250022,"field":"cvss","old":"7.5","new":"8.7"},{"seq":177781,"id":"CVE-2026-77103","ts":1789346351485,"field":"cvss","old":"8.7","new":"7.5"},{"seq":176574,"id":"CVE-2026-77103","ts":1789343154161,"field":"cvss","old":"7.5","new":"8.7"},{"seq":174691,"id":"CVE-2026-77103","ts":1789334847805,"field":"cvss","old":"8.7","new":"7.5"},{"seq":173486,"id":"CVE-2026-77103","ts":1789333637496,"field":"cvss","old":"7.5","new":"8.7"},{"seq":172300,"id":"CVE-2026-77103","ts":1789331073871,"field":"cvss","old":"8.7","new":"7.5"},{"seq":171114,"id":"CVE-2026-77103","ts":1789328735696,"field":"cvss","old":"7.5","new":"8.7"},{"seq":169909,"id":"CVE-2026-77103","ts":1789327137667,"field":"cvss","old":"8.7","new":"7.5"},{"seq":168704,"id":"CVE-2026-77103","ts":1789323793799,"field":"cvss","old":"7.5","new":"8.7"},{"seq":167499,"id":"CVE-2026-77103","ts":1789319663911,"field":"cvss","old":"8.7","new":"7.5"},{"seq":166294,"id":"CVE-2026-77103","ts":1789318721207,"field":"cvss","old":"7.5","new":"8.7"},{"seq":165089,"id":"CVE-2026-77103","ts":1789315769503,"field":"cvss","old":"8.7","new":"7.5"},{"seq":163884,"id":"CVE-2026-77103","ts":1789313590212,"field":"cvss","old":"7.5","new":"8.7"},{"seq":162679,"id":"CVE-2026-77103","ts":1789311882243,"field":"cvss","old":"8.7","new":"7.5"},{"seq":161474,"id":"CVE-2026-77103","ts":1789308680125,"field":"cvss","old":"7.5","new":"8.7"},{"seq":159587,"id":"CVE-2026-77103","ts":1789300451927,"field":"cvss","old":"8.7","new":"7.5"},{"seq":156576,"id":"CVE-2026-77103","ts":1789294723470,"field":"cvss","old":"7.5","new":"8.7"},{"seq":155371,"id":"CVE-2026-77103","ts":1789292914013,"field":"cvss","old":"8.7","new":"7.5"},{"seq":154166,"id":"CVE-2026-77103","ts":1789289749506,"field":"cvss","old":"7.5","new":"8.7"},{"seq":152816,"id":"CVE-2026-77103","ts":1789281653503,"field":"cvss","old":"8.7","new":"7.5"},{"seq":152456,"id":"CVE-2026-77103","ts":1789281224521,"field":"cvss","old":"7.5","new":"8.7"},{"seq":151417,"id":"CVE-2026-77103","ts":1789277607502,"field":"cvss","old":"8.7","new":"7.5"},{"seq":150378,"id":"CVE-2026-77103","ts":1789276209971,"field":"cvss","old":"7.5","new":"8.7"},{"seq":149345,"id":"CVE-2026-77103","ts":1789273803796,"field":"cvss","old":"8.7","new":"7.5"},{"seq":148312,"id":"CVE-2026-77103","ts":1789271294431,"field":"cvss","old":"7.5","new":"8.7"},{"seq":146344,"id":"CVE-2026-77103","ts":1789269357701,"field":"cvss","old":"8.7","new":"7.5"},{"seq":145149,"id":"CVE-2026-77103","ts":1789266305309,"field":"cvss","old":"7.5","new":"8.7"},{"seq":144053,"id":"CVE-2026-77103","ts":1789262586178,"field":"cvss","old":"8.7","new":"7.5"},{"seq":142957,"id":"CVE-2026-77103","ts":1789261486089,"field":"cvss","old":"7.5","new":"8.7"},{"seq":141788,"id":"CVE-2026-77103","ts":1789258811210,"field":"cvss","old":"8.7","new":"7.5"},{"seq":140629,"id":"CVE-2026-77103","ts":1789256700676,"field":"cvss","old":"7.5","new":"8.7"}]}