Commvault vulnerabilities
40 CVEs and advisories name Commvault as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-97334Network messaging layer decompression resource exhaustion
- CVE-2026-97333QAPI stack-based buffer overflow
- CVE-2026-77100MediaAgent Denial of Service
- CVE-2026-77099CVFS Command Execution
- CVE-2026-77096CVFS Missing Authentication
- CVE-2026-77095CvFWD Null Pointer Dereference
- CVE-2026-77094CvFWD Out-of-Bounds Write
- CVE-2026-77093CvFWD Denial of Service
- CVE-2026-77090CVFS Information Disclosure
- CVE-2026-18228Hyperscale Path Traversal
- CVE-2026-77106Cvlaunchd Code Execution
- CVE-2026-77105CommServe Privilege Escalation
- CVE-2026-77104CommServe Path Traversal
- CVE-2026-77103CommServe Information Disclosure
- CVE-2026-77102CommServe Denial of Service
- CVE-2026-77101CommServe Stack-based Buffer Overflow
- CVE-2026-77098Private Metrics Server SQL Injection
- CVE-2026-77097Private Metrics Server Denial of Service
- CVE-2026-77092Content Extractor Privilege Escalation
- CVE-2026-77091DataCube Security Feature Bypass
- CVE-2026-77089Command Center API Authentication Bypass
- CVE-2026-13738Improper Authorization Validation
- CVE-2026-13737Command Restriction Bypass
- CVE-2026-13739Server-Side Request Forgery (SSRF)
- CVE-2025-12776Stored Cross-Site Scripting
- CVE-2025-57791Argument Injection Vulnerability in CommServe
- CVE-2025-57790Path Traversal Vulnerability
- CVE-2025-57789Vulnerability in Initial Administrator Login Process
- CVE-2025-57788Unauthorized API Access Risk
- CVE-2024-13976Commvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection