Is CVE-2026-13738 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-13738

Description

CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.