CVE-2026-77097

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098 Private Metrics Server SQL Injection

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098 Private Metrics Server SQL Injection

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

EUVD-2026-72725

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77097

Commvault Private Metrics Server is affected by a missing authentication condition that impacts the metrics upload functionality, allowing an unauthenticated network-based attacker to cause a denial of service (high availability impact, low integrity impact). The CNA (Commvault) rates this CVSS 4...

CVE-2026-77097 Private Metrics Server Denial of Service

Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CVE-2026-77098

Commvault Private Metrics Server is affected by an SQL injection vulnerability affecting database operations, rated CVSS 3.1: 9.8 (CRITICAL) and CVSS 4.0: 8.8 (HIGH) . CISA SSVC assesses exploitation as "none," automatable as "yes," and technical impact as "partial." No public exploit details are...

EUVD-2026-72726

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

PT-2026-87047

Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server...

CLEANSTART-2026-PZ86100 Security fixes in metrics-server 0.9.0-r1

Package metrics-server version 0.9.0-r1 fixes 2 vulnerabilities: CVE-2026-73500, ghsa-gcjh-h69q-9w9g...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, kubernetes-csi-external-resizer, rancher-system-agent, cluster-api-provider-vsphere, kapp-controller, emissary, cert-manager-webhook-pdns, fluent-operator, rancher, kubescape-operator, apisix-ingress-controller, datadog-agent,...

GO-2023-2045 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2044 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2042 vulnerabilities

Vulnerabilities for packages: metrics-server...

GO-2023-2041 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kind, metrics-server...

GO-2023-2043 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kind, metrics-server...

GO-2023-2095 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kind, configmap-reload-fips, metrics-server, smarter-device-manager-fips...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: kubescape, rancher-webhook, buildkitd, envoy-ratelimit, temporal-fips, cri-tools, metrics-server-fips, aws-ebs-csi-driver, volume-modifier-for-k8s, metrics-server, kubevela, rancher-webhook-fips, docker-compose, k3s, prometheus-adapter, temporal-server-fips, kine,...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: loki-fips, mc, opentelemetry-collector, datadog-agent, prometheus-fips, beats, elastic-agent-fips, metrics-server-fips, commercial-grafana, loki, grafana-fips, jaeger-fips, amazon-cloudwatch-agent-operator-fips, ld-relay-fips, prometheus, agentbeat-fips,...