Commvault vulnerabilities

Products

• Commvault 24
• Cloud 24
• Commcell 10
• Grid(hsx) Cvfs 3

Newest

• commvault cloud Network messaging layer decompression resource exhaustion CVE-2026-97334 8.7 HighOctober 13, 2026
• commvault cloud QAPI stack-based buffer overflow CVE-2026-97333 7.1 HighOctober 13, 2026
• commvault cloud MediaAgent Denial of Service CVE-2026-77100 8.7 HighOctober 13, 2026
• commvault cloud, grid(hsx) cvfs +1 more CVFS Command Execution CVE-2026-77099 9.3 CriticalOctober 13, 2026
• commvault cloud, grid(hsx) cvfs +1 more CVFS Missing Authentication CVE-2026-77096 7.7 HighOctober 13, 2026
• commvault cloud CvFWD Null Pointer Dereference CVE-2026-77095 7.1 HighOctober 13, 2026
• commvault cloud CvFWD Out-of-Bounds Write CVE-2026-77094 7.1 HighOctober 13, 2026
• commvault cloud CvFWD Denial of Service CVE-2026-77093 7.1 HighOctober 13, 2026
• commvault cloud, grid(hsx) cvfs +1 more CVFS Information Disclosure CVE-2026-77090 8.7 HighOctober 13, 2026
• commvault cloud Hyperscale Path Traversal CVE-2026-18228 7.1 HighOctober 13, 2026
• commvault, commvault cloud +1 more Cvlaunchd Code Execution CVE-2026-77106 7.7 HighSeptember 8, 2026
• commvault, commvault cloud +1 more CommServe Privilege Escalation CVE-2026-77105 8.7 HighSeptember 8, 2026
• commvault, commvault cloud +1 more CommServe Path Traversal CVE-2026-77104 8.3 HighSeptember 8, 2026
• commvault, commvault cloud +1 more CommServe Information Disclosure CVE-2026-77103 8.7 HighSeptember 8, 2026
• commvault, commvault cloud +1 more CommServe Denial of Service CVE-2026-77102 8.7 HighSeptember 8, 2026
• commvault, commvault cloud +1 more CommServe Stack-based Buffer Overflow CVE-2026-77101 8.7 HighSeptember 8, 2026
• commvault, commvault cloud +1 more Private Metrics Server SQL Injection CVE-2026-77098 8.8 HighSeptember 8, 2026
• commvault, commvault cloud +1 more Private Metrics Server Denial of Service CVE-2026-77097 8.8 HighSeptember 8, 2026
• commvault, commvault cloud +1 more Content Extractor Privilege Escalation CVE-2026-77092 7.3 HighSeptember 8, 2026
• commvault, commvault cloud +1 more DataCube Security Feature Bypass CVE-2026-77091 8.5 HighSeptember 8, 2026
• commvault, commvault cloud +1 more Command Center API Authentication Bypass CVE-2026-77089 9.3 CriticalSeptember 8, 2026
• commvault, commvault cloud +1 more Improper Authorization Validation CVE-2026-13738 9.2 CriticalAugust 11, 2026
• commvault, commvault cloud +1 more Server-Side Request Forgery (SSRF) CVE-2026-13739 8.8 HighAugust 11, 2026
• commvault, commvault cloud +1 more Command Restriction Bypass CVE-2026-13737 9.2 CriticalAugust 11, 2026
• commvault webconsole, commvault +1 more Stored Cross-Site Scripting CVE-2025-12776 1.8 LowJanuary 7, 2026
• commvault commcell, commvault +1 more Argument Injection Vulnerability in CommServe CVE-2025-57791 Public exploit EPSS 38.8% 6.9 MediumAugust 20, 2025
• commvault commcell, commvault +1 more Path Traversal Vulnerability CVE-2025-57790 Public exploit EPSS 43.6% 8.7 HighAugust 20, 2025
• commvault commcell, commvault +1 more Vulnerability in Initial Administrator Login Process CVE-2025-57789 5.3 MediumAugust 20, 2025
• commvault commcell, commvault +1 more Unauthorized API Access Risk CVE-2025-57788 Public exploit 6.9 MediumAugust 20, 2025
• commvault for windows Commvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection CVE-2024-13976 8.5 HighJuly 25, 2025
• commvault Commvault 11.20.0 - 11.36.0 Windows Access Nodes Compromise via Local File Server Agent Abuse CVE-2024-13975 8.5 HighJuly 25, 2025
• commvault Commvault CommServe Web Server Unauthenticated SQL Injection CVE-2025-34136 6.9 MediumJuly 25, 2025
• commvault, commvault web server +1 more Commvault Web Server unspecified vulnerability CVE-2025-3928 In KEV 8.7 HighApril 25, 2025
• commvault command center, command center innovation release, commvault +2 more Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal CVE-2025-34028 In KEVPublic exploit EPSS 97.6% 9.3 CriticalApril 22, 2025
• commvault commcell This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2021-34997 8.8 HighJanuary 13, 2022
• commvault commcell This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2021-34996 EPSS 82.3% 8.8 HighJanuary 13, 2022
• commvault commcell This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2021-34995 EPSS 68.9% 8.8 HighJanuary 13, 2022
• commvault commcell This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2021-34994 8.8 HighJanuary 13, 2022
• commvault commcell This vulnerability allows remote attackers to bypass authentication on affected installations of... CVE-2021-34993 9.8 CriticalJanuary 13, 2022
• commvault commcell In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29,... CVE-2020-25780 7.5 HighOctober 29, 2020
• commvault A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before... CVE-2017-18044 Public exploit EPSS 68.7% 9.8 CriticalJanuary 19, 2018
• commvault edge, service pack 6 +1 more Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix... CVE-2017-3195 Public exploit EPSS 21.4% 9.8 CriticalDecember 15, 2017
• commvault edge server The Web Console in Commvault Edge Server 10 R2 allows remote attackers to execute arbitrary OS... CVE-2015-7253 10.0 HighNovember 4, 2015