critical9.8
CVE-2026-13739
A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target U…
Impact
A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Commvault | Commvault | from 11.36.0 before 11.36.114 from 11.40.0 before 11.40.63 from 11.44.0 before 11.44.11 from 11.46.0 before 11.46.10 |