Known Vulnerabilities for Galaxy by Commvault
Listed below are 10 of the newest known vulnerabilities associated with "Galaxy" by "Commvault".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105790 json | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authentica... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-103389 json | MISP contains a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. The icon field of a galaxy ... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-103388 json | MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTER_VALI... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-94372 json | MISP contains a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page. When a MISP insta... | Not Provided | 2026-09-21 | 2026-09-21 |
| CVE-2026-94277 json | MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galaxy name directly into HTML ... | Not Provided | 2026-09-21 | 2026-09-21 |
| CVE-2026-91846 json | Affected versions of MISP allow a collection element to be created from a bare UUID without consistently checking whether the... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-89091 json | A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extracto... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-86283 json | MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member event... | Not Provided | 2026-09-06 | 2026-09-08 |
| CVE-2026-85533 json | An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user was ... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-79717 json | A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy server plugin for Pulp. An auth... | Not Provided | 2026-08-25 | 2026-08-27 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Commvault | Galaxy | - |