Commvault Commvault Cloud vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Commvault Commvault Cloud: 10 record(s), with affected versions and fixes.
CVE-2026-97334
High · 8.7
CWE-409 Oct 13, 2026
Network messaging layer decompression resource exhaustion
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.
CVE-2026-97333
High · 7.1
CWE-121 Oct 13, 2026
QAPI stack-based buffer overflow
QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server.
CVE-2026-77100
High · 8.7
CWE-122 Oct 13, 2026
MediaAgent Denial of Service
MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale.
CVE-2026-77099
Critical · 9.3
CWE-78 Oct 13, 2026
CVFS Command Execution
CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.
CVE-2026-77096
High · 7.7
CWE-306 Oct 13, 2026
CVFS Missing Authentication
CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.
CVE-2026-77095
High · 7.1
CWE-476 Oct 13, 2026
CvFWD Null Pointer Dereference
CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
CVE-2026-77094
High · 7.1
CWE-787 Oct 13, 2026
CvFWD Out-of-Bounds Write
CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
CVE-2026-77093
High · 7.1
CWE-190 Oct 13, 2026
CvFWD Denial of Service
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale
CVE-2026-77090
High · 8.7
CWE-611 Oct 13, 2026
CVFS Information Disclosure
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
CVE-2026-18228
High · 7.1
CWE-22 Oct 13, 2026
HyperScale contained a path traversal issue affecting information disclosure. Software customers...
HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperScale MediaAgents.