Login Request a demo
CO
Product
Commvault
by Commvault · last CVE Sep 8, 2026
On CISA KEVExploited in the wild
22
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 8High 10Medium 4Low 0
Severity
All severities22Critical8High10Medium4Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Commvault to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-34028
In wildKEV
10.0
98%
Apr 22
Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
Affected: 11.38.0 before 11.38.20
CVE-2026-77098
9.8
0%
Sep 8
Private Metrics Server SQL Injection
Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-77092
9.8
0%
Sep 8
Content Extractor Privilege Escalation
Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-77089
9.8
1%
Sep 8
Command Center API Authentication Bypass
Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-13738
9.8
1%
Aug 11
Improper Authorization Validation
Affected: 11.36.0 before 11.36.114; 11.40.0 before 11.40.63; 11.44.0 before 11.44.11; 11.46.0 before 11.46.10
CVE-2026-13737
9.8
1%
Aug 11
Command Restriction Bypass
Affected: 11.36.0 before 11.36.114; 11.40.0 before 11.40.63; 11.44.0 before 11.44.11; 11.46.0 before 11.46.10
CVE-2026-13739
9.8
0%
Aug 11
Server-Side Request Forgery (SSRF)
Affected: 11.36.0 before 11.36.114; 11.40.0 before 11.40.63; 11.44.0 before 11.44.11; 11.46.0 before 11.46.10
CVE-2017-18044
9.8
69%
Jan 19
A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; through 11.0
Showing 8