{"id":"CVE-2026-77105","title":"CommServe contained a cryptographic signature verification issue affecting privilege management","summary":"CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server.","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-347"],"vendor":"commvault","product":"commvault","affected":["commvault >= 11.36.0, < 11.36.123","commvault >= 11.40.0, < 11.40.72","commvault >= 11.44.0, < 11.44.20","commvault >= 11.46.0, < 11.46.20"],"patched":["commvault 11.46.20"],"published":"2026-09-08","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:52:59.420","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77105","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_08_7.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-08T13:23:18.772848Z"},"scores":{"nvd":8.8,"cna":8.7},"ingestedAt":"2026-09-08T15:33:26.984Z","epss":0.00177,"epssPercentile":0.07491,"slug":"CVE-2026-77105","body":"## Overview\n\nCommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server.\n\n## Affected\n\n- `commvault >= 11.36.0, < 11.36.123`\n- `commvault >= 11.40.0, < 11.40.72`\n- `commvault >= 11.44.0, < 11.44.20`\n- `commvault >= 11.46.0, < 11.46.20`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `commvault 11.46.20`","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201927,"id":"CVE-2026-77105","ts":1789399986930,"field":"cvss","old":"8.7","new":"8.8"},{"seq":200657,"id":"CVE-2026-77105","ts":1789397562720,"field":"cvss","old":"8.8","new":"8.7"},{"seq":199364,"id":"CVE-2026-77105","ts":1789395472414,"field":"cvss","old":"8.7","new":"8.8"},{"seq":198609,"id":"CVE-2026-77105","ts":1789392166763,"field":"cvss","old":"8.8","new":"8.7"},{"seq":198564,"id":"CVE-2026-77105","ts":1789392092796,"field":"cvss","old":"8.7","new":"8.8"},{"seq":196355,"id":"CVE-2026-77105","ts":1789383734914,"field":"cvss","old":"8.8","new":"8.7"},{"seq":195284,"id":"CVE-2026-77105","ts":1789380554476,"field":"cvss","old":"8.7","new":"8.8"},{"seq":194071,"id":"CVE-2026-77105","ts":1789378659133,"field":"cvss","old":"8.8","new":"8.7"},{"seq":192858,"id":"CVE-2026-77105","ts":1789376488347,"field":"cvss","old":"8.7","new":"8.8"},{"seq":191645,"id":"CVE-2026-77105","ts":1789373581432,"field":"cvss","old":"8.8","new":"8.7"},{"seq":190430,"id":"CVE-2026-77105","ts":1789369428025,"field":"cvss","old":"8.7","new":"8.8"},{"seq":189217,"id":"CVE-2026-77105","ts":1789368355374,"field":"cvss","old":"8.8","new":"8.7"},{"seq":188000,"id":"CVE-2026-77105","ts":1789365208338,"field":"cvss","old":"8.7","new":"8.8"},{"seq":186787,"id":"CVE-2026-77105","ts":1789363436803,"field":"cvss","old":"8.8","new":"8.7"},{"seq":185573,"id":"CVE-2026-77105","ts":1789361192474,"field":"cvss","old":"8.7","new":"8.8"},{"seq":184360,"id":"CVE-2026-77105","ts":1789358300173,"field":"cvss","old":"8.8","new":"8.7"},{"seq":182611,"id":"CVE-2026-77105","ts":1789354298334,"field":"cvss","old":"8.7","new":"8.8"},{"seq":181404,"id":"CVE-2026-77105","ts":1789353262632,"field":"cvss","old":"8.8","new":"8.7"},{"seq":180197,"id":"CVE-2026-77105","ts":1789350253151,"field":"cvss","old":"8.7","new":"8.8"},{"seq":178990,"id":"CVE-2026-77105","ts":1789348250035,"field":"cvss","old":"8.8","new":"8.7"},{"seq":177783,"id":"CVE-2026-77105","ts":1789346351498,"field":"cvss","old":"8.7","new":"8.8"},{"seq":176576,"id":"CVE-2026-77105","ts":1789343154174,"field":"cvss","old":"8.8","new":"8.7"},{"seq":174693,"id":"CVE-2026-77105","ts":1789334847818,"field":"cvss","old":"8.7","new":"8.8"},{"seq":173488,"id":"CVE-2026-77105","ts":1789333637814,"field":"cvss","old":"8.8","new":"8.7"},{"seq":172302,"id":"CVE-2026-77105","ts":1789331073884,"field":"cvss","old":"8.7","new":"8.8"},{"seq":171116,"id":"CVE-2026-77105","ts":1789328735710,"field":"cvss","old":"8.8","new":"8.7"},{"seq":169911,"id":"CVE-2026-77105","ts":1789327137681,"field":"cvss","old":"8.7","new":"8.8"},{"seq":168706,"id":"CVE-2026-77105","ts":1789323793814,"field":"cvss","old":"8.8","new":"8.7"},{"seq":167501,"id":"CVE-2026-77105","ts":1789319663924,"field":"cvss","old":"8.7","new":"8.8"},{"seq":166296,"id":"CVE-2026-77105","ts":1789318721221,"field":"cvss","old":"8.8","new":"8.7"},{"seq":165091,"id":"CVE-2026-77105","ts":1789315769516,"field":"cvss","old":"8.7","new":"8.8"},{"seq":163886,"id":"CVE-2026-77105","ts":1789313590228,"field":"cvss","old":"8.8","new":"8.7"},{"seq":162681,"id":"CVE-2026-77105","ts":1789311882256,"field":"cvss","old":"8.7","new":"8.8"},{"seq":161476,"id":"CVE-2026-77105","ts":1789308680139,"field":"cvss","old":"8.8","new":"8.7"},{"seq":159589,"id":"CVE-2026-77105","ts":1789300451940,"field":"cvss","old":"8.7","new":"8.8"},{"seq":156578,"id":"CVE-2026-77105","ts":1789294723484,"field":"cvss","old":"8.8","new":"8.7"},{"seq":155373,"id":"CVE-2026-77105","ts":1789292914254,"field":"cvss","old":"8.7","new":"8.8"},{"seq":154168,"id":"CVE-2026-77105","ts":1789289749519,"field":"cvss","old":"8.8","new":"8.7"},{"seq":152818,"id":"CVE-2026-77105","ts":1789281653825,"field":"cvss","old":"8.7","new":"8.8"},{"seq":152458,"id":"CVE-2026-77105","ts":1789281224533,"field":"cvss","old":"8.8","new":"8.7"},{"seq":151419,"id":"CVE-2026-77105","ts":1789277607515,"field":"cvss","old":"8.7","new":"8.8"},{"seq":150380,"id":"CVE-2026-77105","ts":1789276209999,"field":"cvss","old":"8.8","new":"8.7"},{"seq":149347,"id":"CVE-2026-77105","ts":1789273803811,"field":"cvss","old":"8.7","new":"8.8"},{"seq":148314,"id":"CVE-2026-77105","ts":1789271294444,"field":"cvss","old":"8.8","new":"8.7"},{"seq":146346,"id":"CVE-2026-77105","ts":1789269357714,"field":"cvss","old":"8.7","new":"8.8"},{"seq":145151,"id":"CVE-2026-77105","ts":1789266305325,"field":"cvss","old":"8.8","new":"8.7"},{"seq":144055,"id":"CVE-2026-77105","ts":1789262586193,"field":"cvss","old":"8.7","new":"8.8"},{"seq":142959,"id":"CVE-2026-77105","ts":1789261486102,"field":"cvss","old":"8.8","new":"8.7"},{"seq":141790,"id":"CVE-2026-77105","ts":1789258811222,"field":"cvss","old":"8.7","new":"8.8"},{"seq":140631,"id":"CVE-2026-77105","ts":1789256700691,"field":"cvss","old":"8.8","new":"8.7"}]}