Skip to content
OpenAdvisories

Vendor

Commvault

40 known vulnerabilities.

Products

Commvault Cloud 24 CommCell 9 Grid(HSX) CVFS 3 Commvault 2 Web Server 1 Service Pack 6 1 WebConsole 1 Commvault for Windows 1 Command Center Innovation Release 1 Command Center 0 Backup & Recovery 0
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-77099

    CVFS Command Execution

    CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.

    Commvault Commvault Cloud Grid(HSX) CVFS
  • Critical 9.3
    CVE-2026-77089

    Command Center API Authentication Bypass

    Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center.

    Commvault Commvault Cloud
  • Critical 9.2
    CVE-2026-13738

    Improper Authorization Validation

    CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, …

    Commvault Commvault Cloud
  • Critical 9.2
    CVE-2026-13737

    Command Restriction Bypass

    CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clie…

    Commvault Commvault Cloud
  • Critical 9.3
    CVE-2025-34028 Exploited Public exploit Scanner template EPSS 98%

    Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal

    The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Executi…

    Commvault Command Center Innovation Release
    KEV May 2, 2025
  • Critical 9.8
    CVE-2021-34993

    This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.…

    Commvault CommCell