Commvault security advisory (AV26-895)
Canada's Cyber Centre advisory AV26-895 warns Commvault Cloud builds before 11.36.123/11.40.72/11.44.20/11.46.20 are affected by a Command Center API authentication bypass.
The Canadian Centre for Cyber Security alerted users that Commvault Cloud versions 11.36, 11.40, 11.44 and 11.46, prior to fixed builds 11.36.123, 11.40.72, 11.44.20 and 11.46.20, are affected by issue CV_2026_07_1, a Command Center API authentication bypass. Administrators are encouraged to review the linked vendor advisories and apply the available updates.
- Affects Commvault Cloud 11.36-11.46; issue CV_2026_07_1 is a Command Center API authentication bypass.
- Fixed builds: 11.36.123, 11.40.72, 11.44.20, 11.46.20; admins urged to update.
- Vendors
- Commvault
- Products
- Commvault CloudCommand Center
- Organizations
- Canadian Centre for Cyber Security
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-895 Date: September 8, 2026 As of September 8, 2026, Commvault is affected by vulnerabilities in the following product: Commvault Cloud 11. 36. 0 Prior to 11.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.