Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-13739

Server-Side Request Forgery (SSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Commvault

Description

A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Commvault Commvault Cloud

Default version status: unknown

  • 11.46.0 to ≤ 11.46.9affected
  • 11.44.0 to ≤ 11.44.10affected
  • 11.40.0 to ≤ 11.40.62affected
  • 11.36.0 to ≤ 11.36.113affected

References