What is GHSA-vpjp-54p7-3qc9?

GHSA-vpjp-54p7-3qc9 is a security advisory published by GitHub Security Advisories with Critical severity. CommServe contained an allowlist bypass vulnerability affecting command execution authorization. ...

Which CVE IDs does GHSA-vpjp-54p7-3qc9 cover?

GHSA-vpjp-54p7-3qc9 covers the following CVE IDs: CVE-2026-13737. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vpjp-54p7-3qc9Critical

CommServe contained an allowlist bypass vulnerability affecting command execution authorization. ...

Vendor

GitHub Security Advisories

Published

August 11, 2026

Last Modified

August 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-13737 →

📋 Description

CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13737
https://documentation.commvault.com/securityadvisories/CV_2026_07_8.html
https://github.com/advisories/GHSA-vpjp-54p7-3qc9