CVE-2026-77097: Private Metrics Server Denial of Service
Published Sep 8, 2026
·Updated
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.
Affected Software
5 affected components
Private Metrics Server
Commvault Commvault>=11.36.0<11.36.123
Commvault Commvault>=11.40.0<11.40.72
Commvault Commvault>=11.44.0<11.44.20
Commvault Commvault>=11.46.0<11.46.20
Event History
Sep 8, 2026
CVE Published
via MITRE·12:12 PM
Data Sourced
via MITRE·12:12 PM
DescriptionWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the recommended remediation?
Upgrade or update Private Metrics Server to the resolved maintenance release.
2
What impact does this issue have?
The missing authentication condition affects metrics upload functionality and can affect service availability, resulting in a denial of service.