CVE-2026-77090
CVFS Information Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
| Vendor | commvault |
| Product | commvault cloud |
| Published | Oct 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for commvault commvault cloud
Be the first to know when new unknown vulnerabilities affecting commvault commvault cloud are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Commvault / Commvault Cloud
11.46.0 ≤ 11.46.29 11.44.0 ≤ 11.44.24 11.40.0 ≤ 11.40.77 11.36.0 ≤ 11.36.126
Commvault / Grid(HSX) CVFS
5.0.1.0 ≤ 5.0.14.4
References
Credits
🔍 Michael Tucker and Tan Chew Keong from the XOR team at JPMorgan Chase.