CVE-2026-77092: Content Extractor Privilege Escalation
Published Sep 8, 2026
·Updated
Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor.
Affected Software
5 affected components
Content Extractor
Commvault Commvault>=11.36.0<11.36.123
Commvault Commvault>=11.40.0<11.40.72
Commvault Commvault>=11.44.0<11.44.20
Commvault Commvault>=11.46.0<11.46.20
Event History
Sep 8, 2026
CVE Published
via MITRE·12:12 PM
Data Sourced
via MITRE·12:12 PM
DescriptionWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Are specific affected versions or configurations identified?
No affected versions or configuration details are provided in the available information.
2
What should teams do if they cannot immediately update?
No compensating controls or temporary workaround are specified. The provided remediation is to upgrade Content Extractor to the resolved maintenance release.