Vulnerability Details CVE-2026-13738
CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 48.0%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-13738
-
cpe:2.3:a:commvault:commvault:11.36.0
-
cpe:2.3:a:commvault:commvault:11.36.1
-
cpe:2.3:a:commvault:commvault:11.36.10
-
cpe:2.3:a:commvault:commvault:11.36.12
-
cpe:2.3:a:commvault:commvault:11.36.14
-
cpe:2.3:a:commvault:commvault:11.36.16
-
cpe:2.3:a:commvault:commvault:11.36.18
-
cpe:2.3:a:commvault:commvault:11.36.20
-
cpe:2.3:a:commvault:commvault:11.36.22
-
cpe:2.3:a:commvault:commvault:11.36.24
-
cpe:2.3:a:commvault:commvault:11.36.25
-
cpe:2.3:a:commvault:commvault:11.36.27
-
cpe:2.3:a:commvault:commvault:11.36.28
-
cpe:2.3:a:commvault:commvault:11.36.29
-
cpe:2.3:a:commvault:commvault:11.36.3
-
cpe:2.3:a:commvault:commvault:11.36.30
-
cpe:2.3:a:commvault:commvault:11.36.32
-
cpe:2.3:a:commvault:commvault:11.36.34
-
cpe:2.3:a:commvault:commvault:11.36.35
-
cpe:2.3:a:commvault:commvault:11.36.36
-
cpe:2.3:a:commvault:commvault:11.36.37
-
cpe:2.3:a:commvault:commvault:11.36.38
-
cpe:2.3:a:commvault:commvault:11.36.39
-
cpe:2.3:a:commvault:commvault:11.36.41
-
cpe:2.3:a:commvault:commvault:11.36.42
-
cpe:2.3:a:commvault:commvault:11.36.43
-
cpe:2.3:a:commvault:commvault:11.36.46
-
cpe:2.3:a:commvault:commvault:11.36.47
-
cpe:2.3:a:commvault:commvault:11.36.49
-
cpe:2.3:a:commvault:commvault:11.36.50
-
cpe:2.3:a:commvault:commvault:11.36.51
-
cpe:2.3:a:commvault:commvault:11.36.52
-
cpe:2.3:a:commvault:commvault:11.36.55
-
cpe:2.3:a:commvault:commvault:11.36.6
-
cpe:2.3:a:commvault:commvault:11.36.60
-
cpe:2.3:a:commvault:commvault:11.36.65
-
cpe:2.3:a:commvault:commvault:11.36.68
-
cpe:2.3:a:commvault:commvault:11.36.72
-
cpe:2.3:a:commvault:commvault:11.36.76
-
cpe:2.3:a:commvault:commvault:11.36.8
-
cpe:2.3:a:commvault:commvault:11.36.80
-
cpe:2.3:a:commvault:commvault:11.36.83
-
cpe:2.3:a:commvault:commvault:11.36.87
-
cpe:2.3:a:commvault:commvault:11.40.0
-
cpe:2.3:a:commvault:commvault:11.40.16
-
cpe:2.3:a:commvault:commvault:11.40.22
-
cpe:2.3:a:commvault:commvault:11.40.26
-
cpe:2.3:a:commvault:commvault:11.40.30
-
cpe:2.3:a:commvault:commvault:11.40.34
-
cpe:2.3:a:commvault:commvault:11.44.0
-
cpe:2.3:a:commvault:commvault:11.46.0