[ CVE-2026-77094 · Published 13 Oct 2026 ]
Vulnerability in Commvault Cloud
CVSS 7.1
EPSS <1%No fix listed yet
[ Description ]Official description
CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.