Vulnerabilidades do Commvault Commvault Cloud
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Commvault Commvault Cloud: 10 registro(s), com versões afetadas e correções.
CVE-2026-97334
Alta · 8.7
CWE-409 13/10/2026
Network messaging layer decompression resource exhaustion
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.
CVE-2026-97333
Alta · 7.1
CWE-121 13/10/2026
QAPI stack-based buffer overflow
QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server.
CVE-2026-77100
Alta · 8.7
CWE-122 13/10/2026
MediaAgent Denial of Service
MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale.
CVE-2026-77099
Crítica · 9.3
CWE-78 13/10/2026
Injeção de comando no Commvault CVFS
O CVFS continha um problema de validação de entrada que afeta a execução de comandos. Clientes de software devem atualizar para a versão de manutenção corrigida. Atualize o CVFS.
CVE-2026-77096
Alta · 7.7
CWE-306 13/10/2026
CVFS Missing Authentication
CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.
CVE-2026-77095
Alta · 7.1
CWE-476 13/10/2026
CvFWD Null Pointer Dereference
CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
CVE-2026-77094
Alta · 7.1
CWE-787 13/10/2026
CvFWD Out-of-Bounds Write
CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
CVE-2026-77093
Alta · 7.1
CWE-190 13/10/2026
CvFWD Denial of Service
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale
CVE-2026-77090
Alta · 8.7
CWE-611 13/10/2026
CVFS Information Disclosure
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
CVE-2026-18228
Alta · 7.1
CWE-22 13/10/2026
HyperScale contained a path traversal issue affecting information disclosure. Software customers...
HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperScale MediaAgents.