[ Vendor · 12 CVEs ]
Commvault
CVEs affecting Commvault published in the last 30 days, plus any Commvault CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97333 | 13 Oct 2026 | CVSS 7.1 | Commvault CloudQAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update… | |
| CVE-2026-97334 | 13 Oct 2026 | CVSS 8.7 | Commvault CloudThe network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to… | |
| CVE-2026-77093 | 13 Oct 2026 | CVSS 7.1 | Commvault CloudCvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault… | |
| CVE-2026-77094 | 13 Oct 2026 | CVSS 7.1 | Commvault CloudCvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers… | |
| CVE-2026-77095 | 13 Oct 2026 | CVSS 7.1 | Commvault CloudCvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all… | |
| CVE-2026-77096 | 13 Oct 2026 | CVSS 7.7 | Commvault CloudCVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update… | |
| CVE-2026-77099 | 13 Oct 2026 | CVSS 9.3 | Commvault CloudCVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS. | |
| CVE-2026-77100 | 13 Oct 2026 | CVSS 8.7 | Commvault CloudMediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release… | |
| CVE-2026-77090 | 13 Oct 2026 | CVSS 8.7 | Commvault CloudCVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved… | |
| CVE-2026-18228 | 13 Oct 2026 | CVSS 7.1 | Commvault CloudHyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update… | |
| CVE-2025-3928 | 25 Apr 2025 | CVSS 8.8 | Commvault Web Server UnspecifiedCommvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory… | Exploited |
| CVE-2025-34028 | 22 Apr 2025 | CVSS 10.0 | Commvault Command Center Path TraversalThe Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when… | Exploited |