CVE Watch8 sept 2026

CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Softwar

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 8 sept 2026 · Última mod.: 8 sept 2026 · CWE-306

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Referencias oficiales

documentation.commvault.comhttps://documentation.commvault.com/securityadvisories/CV_2026_08_1.html

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-839915.5 MED

—

———Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.4h CVE-2026-730045.5 MED

—

———Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.4h CVE-2026-729645.5 MED

—

———Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.4h CVE-2026-696745.5 MED

—

———Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.4h CVE-2026-695545.5 MED

—

———Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.4h CVE-2026-695287.8 ALT

—

———Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.4h