{"id":"CVE-2026-77104","title":"CommServe contained a path traversal issue affecting information disclosure","summary":"CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-22"],"vendor":"commvault","product":"commvault","affected":["commvault >= 11.36.0, < 11.36.123","commvault >= 11.40.0, < 11.40.72","commvault >= 11.44.0, < 11.44.20","commvault >= 11.46.0, < 11.46.20"],"patched":["commvault 11.46.20"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:57:00.180","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77104","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_08_6.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-08T13:23:30.381204Z"},"scores":{"nvd":7.5,"cna":8.3},"ingestedAt":"2026-09-08T15:33:26.984Z","epss":0.00374,"epssPercentile":0.31344,"slug":"CVE-2026-77104","body":"## Overview\n\nCommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe.\n\n## Affected\n\n- `commvault >= 11.36.0, < 11.36.123`\n- `commvault >= 11.40.0, < 11.40.72`\n- `commvault >= 11.44.0, < 11.44.20`\n- `commvault >= 11.46.0, < 11.46.20`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `commvault 11.46.20`","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201926,"id":"CVE-2026-77104","ts":1789399986922,"field":"cvss","old":"8.3","new":"7.5"},{"seq":200656,"id":"CVE-2026-77104","ts":1789397562713,"field":"cvss","old":"7.5","new":"8.3"},{"seq":199363,"id":"CVE-2026-77104","ts":1789395472400,"field":"cvss","old":"8.3","new":"7.5"},{"seq":198608,"id":"CVE-2026-77104","ts":1789392166755,"field":"cvss","old":"7.5","new":"8.3"},{"seq":198563,"id":"CVE-2026-77104","ts":1789392092790,"field":"cvss","old":"8.3","new":"7.5"},{"seq":196354,"id":"CVE-2026-77104","ts":1789383734907,"field":"cvss","old":"7.5","new":"8.3"},{"seq":195283,"id":"CVE-2026-77104","ts":1789380554468,"field":"cvss","old":"8.3","new":"7.5"},{"seq":194070,"id":"CVE-2026-77104","ts":1789378659126,"field":"cvss","old":"7.5","new":"8.3"},{"seq":192857,"id":"CVE-2026-77104","ts":1789376488340,"field":"cvss","old":"8.3","new":"7.5"},{"seq":191644,"id":"CVE-2026-77104","ts":1789373581424,"field":"cvss","old":"7.5","new":"8.3"},{"seq":190429,"id":"CVE-2026-77104","ts":1789369428018,"field":"cvss","old":"8.3","new":"7.5"},{"seq":189216,"id":"CVE-2026-77104","ts":1789368355367,"field":"cvss","old":"7.5","new":"8.3"},{"seq":187999,"id":"CVE-2026-77104","ts":1789365208331,"field":"cvss","old":"8.3","new":"7.5"},{"seq":186786,"id":"CVE-2026-77104","ts":1789363436796,"field":"cvss","old":"7.5","new":"8.3"},{"seq":185572,"id":"CVE-2026-77104","ts":1789361192468,"field":"cvss","old":"8.3","new":"7.5"},{"seq":184359,"id":"CVE-2026-77104","ts":1789358300167,"field":"cvss","old":"7.5","new":"8.3"},{"seq":182610,"id":"CVE-2026-77104","ts":1789354298328,"field":"cvss","old":"8.3","new":"7.5"},{"seq":181403,"id":"CVE-2026-77104","ts":1789353262626,"field":"cvss","old":"7.5","new":"8.3"},{"seq":180196,"id":"CVE-2026-77104","ts":1789350253144,"field":"cvss","old":"8.3","new":"7.5"},{"seq":178989,"id":"CVE-2026-77104","ts":1789348250029,"field":"cvss","old":"7.5","new":"8.3"},{"seq":177782,"id":"CVE-2026-77104","ts":1789346351492,"field":"cvss","old":"8.3","new":"7.5"},{"seq":176575,"id":"CVE-2026-77104","ts":1789343154168,"field":"cvss","old":"7.5","new":"8.3"},{"seq":174692,"id":"CVE-2026-77104","ts":1789334847811,"field":"cvss","old":"8.3","new":"7.5"},{"seq":173487,"id":"CVE-2026-77104","ts":1789333637654,"field":"cvss","old":"7.5","new":"8.3"},{"seq":172301,"id":"CVE-2026-77104","ts":1789331073878,"field":"cvss","old":"8.3","new":"7.5"},{"seq":171115,"id":"CVE-2026-77104","ts":1789328735703,"field":"cvss","old":"7.5","new":"8.3"},{"seq":169910,"id":"CVE-2026-77104","ts":1789327137674,"field":"cvss","old":"8.3","new":"7.5"},{"seq":168705,"id":"CVE-2026-77104","ts":1789323793806,"field":"cvss","old":"7.5","new":"8.3"},{"seq":167500,"id":"CVE-2026-77104","ts":1789319663917,"field":"cvss","old":"8.3","new":"7.5"},{"seq":166295,"id":"CVE-2026-77104","ts":1789318721214,"field":"cvss","old":"7.5","new":"8.3"},{"seq":165090,"id":"CVE-2026-77104","ts":1789315769510,"field":"cvss","old":"8.3","new":"7.5"},{"seq":163885,"id":"CVE-2026-77104","ts":1789313590220,"field":"cvss","old":"7.5","new":"8.3"},{"seq":162680,"id":"CVE-2026-77104","ts":1789311882250,"field":"cvss","old":"8.3","new":"7.5"},{"seq":161475,"id":"CVE-2026-77104","ts":1789308680132,"field":"cvss","old":"7.5","new":"8.3"},{"seq":159588,"id":"CVE-2026-77104","ts":1789300451934,"field":"cvss","old":"8.3","new":"7.5"},{"seq":156577,"id":"CVE-2026-77104","ts":1789294723477,"field":"cvss","old":"7.5","new":"8.3"},{"seq":155372,"id":"CVE-2026-77104","ts":1789292914134,"field":"cvss","old":"8.3","new":"7.5"},{"seq":154167,"id":"CVE-2026-77104","ts":1789289749513,"field":"cvss","old":"7.5","new":"8.3"},{"seq":152817,"id":"CVE-2026-77104","ts":1789281653662,"field":"cvss","old":"8.3","new":"7.5"},{"seq":152457,"id":"CVE-2026-77104","ts":1789281224527,"field":"cvss","old":"7.5","new":"8.3"},{"seq":151418,"id":"CVE-2026-77104","ts":1789277607509,"field":"cvss","old":"8.3","new":"7.5"},{"seq":150379,"id":"CVE-2026-77104","ts":1789276209985,"field":"cvss","old":"7.5","new":"8.3"},{"seq":149346,"id":"CVE-2026-77104","ts":1789273803803,"field":"cvss","old":"8.3","new":"7.5"},{"seq":148313,"id":"CVE-2026-77104","ts":1789271294438,"field":"cvss","old":"7.5","new":"8.3"},{"seq":146345,"id":"CVE-2026-77104","ts":1789269357707,"field":"cvss","old":"8.3","new":"7.5"},{"seq":145150,"id":"CVE-2026-77104","ts":1789266305317,"field":"cvss","old":"7.5","new":"8.3"},{"seq":144054,"id":"CVE-2026-77104","ts":1789262586185,"field":"cvss","old":"8.3","new":"7.5"},{"seq":142958,"id":"CVE-2026-77104","ts":1789261486095,"field":"cvss","old":"7.5","new":"8.3"},{"seq":141789,"id":"CVE-2026-77104","ts":1789258811216,"field":"cvss","old":"8.3","new":"7.5"},{"seq":140630,"id":"CVE-2026-77104","ts":1789256700684,"field":"cvss","old":"7.5","new":"8.3"}]}