CVE-2026-77090

Published: Ott 13, 2026 Last Modified: Ott 13, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,7
Source: 050066fd-a2f9-4f32-ab5d-4c53f48bc333
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.

https://documentation.commvault.com/securityadvisories/CV_2…
https://documentation.commvault.com/securityadvisories/CV_2026_07_4.html