Commvault
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Web Server | 1 | 1 | Apr 25, 2025 |
| Command Center Innovation Release | 1 | 1 | Apr 22, 2025 |
| Commvault Cloud | 24 | – | Oct 13, 2026 |
| CommCell | 9 | – | Aug 20, 2025 |
| Grid(HSX) CVFS | 3 | – | Oct 13, 2026 |
| Commvault | 2 | – | Jul 25, 2025 |
| WebConsole | 1 | – | Jan 7, 2026 |
| Commvault for Windows | 1 | – | Jul 25, 2025 |
Exploited and recent CVEs
- CVE-2025-3928 Commvault Web Server unspecified vulnerability 2.5%
- CVE-2025-34028 Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal 97.6%
- CVE-2026-97334 Network messaging layer decompression resource exhaustion 0.4%
- CVE-2026-97333 QAPI stack-based buffer overflow 0.2%
- CVE-2026-77100 MediaAgent Denial of Service 0.3%
- CVE-2026-77099 CVFS Command Execution 0.4%
- CVE-2026-77099 CVFS Command Execution 0.4%
- CVE-2026-77096 CVFS Missing Authentication 0.2%
- CVE-2026-77096 CVFS Missing Authentication 0.2%
- CVE-2026-77095 CvFWD Null Pointer Dereference 0.2%
- CVE-2026-77094 CvFWD Out-of-Bounds Write 0.2%
- CVE-2026-77093 CvFWD Denial of Service 0.2%
- CVE-2026-77090 CVFS Information Disclosure 0.3%
- CVE-2026-77090 CVFS Information Disclosure 0.3%
- CVE-2026-18228 Hyperscale Path Traversal 0.4%
- CVE-2026-77106 Cvlaunchd Code Execution 0.6%
- CVE-2026-77105 CommServe Privilege Escalation 0.3%
- CVE-2026-77104 CommServe Path Traversal 0.6%
- CVE-2026-77103 CommServe Information Disclosure 0.5%
- CVE-2026-77102 CommServe Denial of Service 0.5%
- CVE-2026-77101 CommServe Stack-based Buffer Overflow 0.5%
- CVE-2026-77098 Private Metrics Server SQL Injection 0.5%
- CVE-2026-77097 Private Metrics Server Denial of Service 0.5%
- CVE-2026-77092 Content Extractor Privilege Escalation 0.3%
- CVE-2026-77091 DataCube Security Feature Bypass 0.2%
- CVE-2026-77089 Command Center API Authentication Bypass 0.6%
- CVE-2026-13738 Improper Authorization Validation 0.7%
- CVE-2026-13737 Command Restriction Bypass 0.7%
- CVE-2026-13739 Server-Side Request Forgery (SSRF) 0.5%
- CVE-2025-12776 Stored Cross-Site Scripting 0.2%