CVE Watch8 sept 2026

CVE-2026-77098

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenanc

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 8 sept 2026 · Última mod.: 8 sept 2026 · CWE-89

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Referencias oficiales

documentation.commvault.comhttps://documentation.commvault.com/securityadvisories/CV_2026_08_2.html

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-697168.8 ALT

—

———Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.4h CVE-2026-696366.5 MED

—

———Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.4h CVE-2026-673708.8 ALT

—

———Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.4h CVE-2026-668208.8 ALT

—

———Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.4h CVE-2026-668198.8 ALT

—

———Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.4h CVE-2026-628958.8 ALT

—

———Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network.4h