CVE-2026-77089

Commvault Command Center API suffered an authentication bypass vulnerability allowing privilege escalation.

An authentication bypass in the Command Center API allowed attackers to escalate privileges without valid credentials, directly violating NIST 800-171 access control requirements. DIB organizations must ensure all Commvault components are patched to prevent unauthorized access to sensitive data and systems. This failure highlights the risk of relying on unpatched APIs in critical infrastructure.

Shame score — An authentication bypass in a core management API is a severe, avoidable failure that directly undermines access control and data confidentiality.