CVE-2026-13738: Improper Authorization Validation

Published Aug 11, 2026

Updated

CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.

Event History

Aug 11, 2026

CVE Published

via MITRE·11:01 AM

Data Sourced

via MITRE·11:01 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2026-13738?

CVE-2026-13738 has a risk score of 60, indicating a moderate level of severity.

How do I fix CVE-2026-13738?

To fix CVE-2026-13738, users should upgrade to the resolved maintenance release of Commvault.

What type of vulnerability is CVE-2026-13738?

CVE-2026-13738 is an improper authorization validation vulnerability that allows an authorization bypass.

Which Commvault installations are affected by CVE-2026-13738?

CVE-2026-13738 affects CommServe, Webserver, Command Center, Media Agents, Clients, and HyperScale X installations.

When was CVE-2026-13738 published?

CVE-2026-13738 was published on August 11, 2026.

CVE-2026-13738: Improper Authorization Validation

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-13738?

How do I fix CVE-2026-13738?

What type of vulnerability is CVE-2026-13738?

Which Commvault installations are affected by CVE-2026-13738?

When was CVE-2026-13738 published?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-13738?

How do I fix CVE-2026-13738?

What type of vulnerability is CVE-2026-13738?

Which Commvault installations are affected by CVE-2026-13738?

When was CVE-2026-13738 published?