{"id":"CVE-2026-77106","title":"Cvlaunchd contained a missing authorization issue affecting command execution authorization","summary":"Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, …","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-862"],"vendor":"commvault","product":"commvault","affected":["commvault >= 11.36.0, < 11.36.123","commvault >= 11.40.0, < 11.40.72","commvault >= 11.44.0, < 11.44.20","commvault >= 11.46.0, < 11.46.20"],"patched":["commvault 11.46.20"],"published":"2026-09-08","updated":"2026-09-11","sourceUpdated":"2026-09-11T14:26:44.020","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-77106","references":[{"url":"https://documentation.commvault.com/securityadvisories/CV_2026_08_8.html","label":"050066fd-a2f9-4f32-ab5d-4c53f48bc333"}],"tags":["nvd","cve.org"],"epss":0.0058,"epssPercentile":0.45281,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-08T13:22:42.518383Z"},"scores":{"nvd":8.8,"cna":7.7},"ingestedAt":"2026-09-08T15:33:26.984Z","slug":"CVE-2026-77106","body":"## Overview\n\nCvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.\n\n## Affected\n\n- `commvault >= 11.36.0, < 11.36.123`\n- `commvault >= 11.40.0, < 11.40.72`\n- `commvault >= 11.44.0, < 11.44.20`\n- `commvault >= 11.46.0, < 11.46.20`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `commvault 11.46.20`","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201928,"id":"CVE-2026-77106","ts":1789399986937,"field":"cvss","old":"7.7","new":"8.8"},{"seq":200658,"id":"CVE-2026-77106","ts":1789397562727,"field":"cvss","old":"8.8","new":"7.7"},{"seq":199365,"id":"CVE-2026-77106","ts":1789395472428,"field":"cvss","old":"7.7","new":"8.8"},{"seq":198610,"id":"CVE-2026-77106","ts":1789392166771,"field":"cvss","old":"8.8","new":"7.7"},{"seq":198565,"id":"CVE-2026-77106","ts":1789392092803,"field":"cvss","old":"7.7","new":"8.8"},{"seq":196356,"id":"CVE-2026-77106","ts":1789383734921,"field":"cvss","old":"8.8","new":"7.7"},{"seq":195285,"id":"CVE-2026-77106","ts":1789380554484,"field":"cvss","old":"7.7","new":"8.8"},{"seq":194072,"id":"CVE-2026-77106","ts":1789378659140,"field":"cvss","old":"8.8","new":"7.7"},{"seq":192859,"id":"CVE-2026-77106","ts":1789376488353,"field":"cvss","old":"7.7","new":"8.8"},{"seq":191646,"id":"CVE-2026-77106","ts":1789373581441,"field":"cvss","old":"8.8","new":"7.7"},{"seq":190431,"id":"CVE-2026-77106","ts":1789369428032,"field":"cvss","old":"7.7","new":"8.8"},{"seq":189218,"id":"CVE-2026-77106","ts":1789368355381,"field":"cvss","old":"8.8","new":"7.7"},{"seq":188001,"id":"CVE-2026-77106","ts":1789365208344,"field":"cvss","old":"7.7","new":"8.8"},{"seq":186788,"id":"CVE-2026-77106","ts":1789363436810,"field":"cvss","old":"8.8","new":"7.7"},{"seq":185574,"id":"CVE-2026-77106","ts":1789361192481,"field":"cvss","old":"7.7","new":"8.8"},{"seq":184361,"id":"CVE-2026-77106","ts":1789358300180,"field":"cvss","old":"8.8","new":"7.7"},{"seq":182612,"id":"CVE-2026-77106","ts":1789354298341,"field":"cvss","old":"7.7","new":"8.8"},{"seq":181405,"id":"CVE-2026-77106","ts":1789353262639,"field":"cvss","old":"8.8","new":"7.7"},{"seq":180198,"id":"CVE-2026-77106","ts":1789350253157,"field":"cvss","old":"7.7","new":"8.8"},{"seq":178991,"id":"CVE-2026-77106","ts":1789348250043,"field":"cvss","old":"8.8","new":"7.7"},{"seq":177784,"id":"CVE-2026-77106","ts":1789346351505,"field":"cvss","old":"7.7","new":"8.8"},{"seq":176577,"id":"CVE-2026-77106","ts":1789343154181,"field":"cvss","old":"8.8","new":"7.7"},{"seq":174694,"id":"CVE-2026-77106","ts":1789334847824,"field":"cvss","old":"7.7","new":"8.8"},{"seq":173489,"id":"CVE-2026-77106","ts":1789333637973,"field":"cvss","old":"8.8","new":"7.7"},{"seq":172303,"id":"CVE-2026-77106","ts":1789331073891,"field":"cvss","old":"7.7","new":"8.8"},{"seq":171117,"id":"CVE-2026-77106","ts":1789328735718,"field":"cvss","old":"8.8","new":"7.7"},{"seq":169912,"id":"CVE-2026-77106","ts":1789327137688,"field":"cvss","old":"7.7","new":"8.8"},{"seq":168707,"id":"CVE-2026-77106","ts":1789323793821,"field":"cvss","old":"8.8","new":"7.7"},{"seq":167502,"id":"CVE-2026-77106","ts":1789319663931,"field":"cvss","old":"7.7","new":"8.8"},{"seq":166297,"id":"CVE-2026-77106","ts":1789318721229,"field":"cvss","old":"8.8","new":"7.7"},{"seq":165092,"id":"CVE-2026-77106","ts":1789315769524,"field":"cvss","old":"7.7","new":"8.8"},{"seq":163887,"id":"CVE-2026-77106","ts":1789313590236,"field":"cvss","old":"8.8","new":"7.7"},{"seq":162682,"id":"CVE-2026-77106","ts":1789311882262,"field":"cvss","old":"7.7","new":"8.8"},{"seq":161477,"id":"CVE-2026-77106","ts":1789308680147,"field":"cvss","old":"8.8","new":"7.7"},{"seq":159590,"id":"CVE-2026-77106","ts":1789300451946,"field":"cvss","old":"7.7","new":"8.8"},{"seq":156579,"id":"CVE-2026-77106","ts":1789294723491,"field":"cvss","old":"8.8","new":"7.7"},{"seq":155374,"id":"CVE-2026-77106","ts":1789292914373,"field":"cvss","old":"7.7","new":"8.8"},{"seq":154169,"id":"CVE-2026-77106","ts":1789289749526,"field":"cvss","old":"8.8","new":"7.7"},{"seq":152819,"id":"CVE-2026-77106","ts":1789281653985,"field":"cvss","old":"7.7","new":"8.8"},{"seq":152459,"id":"CVE-2026-77106","ts":1789281224540,"field":"cvss","old":"8.8","new":"7.7"},{"seq":151420,"id":"CVE-2026-77106","ts":1789277607522,"field":"cvss","old":"7.7","new":"8.8"},{"seq":150381,"id":"CVE-2026-77106","ts":1789276210013,"field":"cvss","old":"8.8","new":"7.7"},{"seq":149348,"id":"CVE-2026-77106","ts":1789273803818,"field":"cvss","old":"7.7","new":"8.8"},{"seq":148315,"id":"CVE-2026-77106","ts":1789271294452,"field":"cvss","old":"8.8","new":"7.7"},{"seq":146347,"id":"CVE-2026-77106","ts":1789269357721,"field":"cvss","old":"7.7","new":"8.8"},{"seq":145152,"id":"CVE-2026-77106","ts":1789266305333,"field":"cvss","old":"8.8","new":"7.7"},{"seq":144056,"id":"CVE-2026-77106","ts":1789262586200,"field":"cvss","old":"7.7","new":"8.8"},{"seq":142960,"id":"CVE-2026-77106","ts":1789261486109,"field":"cvss","old":"8.8","new":"7.7"},{"seq":141791,"id":"CVE-2026-77106","ts":1789258811229,"field":"cvss","old":"7.7","new":"8.8"},{"seq":140632,"id":"CVE-2026-77106","ts":1789256700699,"field":"cvss","old":"8.8","new":"7.7"}]}