CVE-2026-77097

HighCVSS 8.2/10Last modified Sep 11, 2026

Description

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-770989.8Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenancCVE-2026-770999.3CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVCVE-2026-77107.3A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticatCVE-2026-771008.7MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance CVE-2026-771017.5CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance rCVE-2026-771027.5CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance reCVE-2026-771037.5CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to CVE-2026-771047.5CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. UpdCVE-2026-771058.8CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved mainCVE-2026-771068.8Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenaCVE-2026-771087.5Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverageCVE-2026-771098.6Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage
CVE-2026-77097: High severity, CVSS 8.2 | Vulnix