{"vulnerability": "cve-2026-13737", "sightings": [{"uuid": "eab9ce1d-1ac9-4aa0-ba36-4f7fefce990c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13737", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3msv27hkru62l", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-13737\n\nCommServe contained an allowlist bypass vulnerability affecting command execution authorization.  Software customers upgrade to resolved maintenanc...", "creation_timestamp": "2026-08-12T11:39:39.150636Z"}, {"uuid": "46356bbf-5b51-4895-8c5e-ab933033c0c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13737", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3msskabas5b2n", "content": "\u26a0\ufe0f PATCH NOW\n\nCommvault patched a critical flaw (CVSS 9.2) in CommServe, the brain of its backup platform: an allowlist bypass lets blocked commands run.\n\nAffects versions 11.36 to 11.46 on Linux and Windows.\n\nFix: update to the patched release now. (CVE-2026-13737)", "creation_timestamp": "2026-08-11T11:48:27.121541Z"}, {"uuid": "ac2c20e9-87bf-4618-a162-b6f445a09741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13737", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msspe5e6nu2g", "content": "CVE-2026-13737 - commvault cloud\nA security issue in Commvault software allows unauthorized access to certain commands. This could allow an attacker to perform actions they shouldn't be able to do.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#commvaultcloud #commvault #CVE #infosec", "creation_timestamp": "2026-08-11T13:20:05.560718Z"}]}