Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-77098

Private Metrics Server SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Commvault

Description

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Commvault Commvault Cloud

Default version status: unknown

  • 11.46.0 to ≤ 11.46.19affected
  • 11.44.0 to ≤ 11.44.19affected
  • 11.40.0 to ≤ 11.40.71affected
  • 11.36.0 to ≤ 11.36.122affected

References