Commvault vulnerabilities | LiveThreat CVE Feed

Product

Commvault

by Commvault · last CVE Sep 8, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 8High 10Medium 4Low 0

Severity

All severities22 Critical8 High10 Medium4 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Commvault to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-3928 In wildKEV	8.8	3%	Apr 25	Commvault Web Server unspecified vulnerability Affected: 11.20.0 before 11.20.217; 11.28.0 before 11.28.141; 11.32.0 before 11.32.89; 11.36.0 before 11.36.46
CVE-2026-77106	8.8	1%	Sep 8	Cvlaunchd Code Execution Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-77105	8.8	0%	Sep 8	CommServe Privilege Escalation Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2025-57790	8.8	44%	Aug 20	A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue Affected: before 11.36.60
CVE-2026-77097	8.2	0%	Sep 8	Private Metrics Server Denial of Service Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-77091	7.8	0%	Sep 8	DataCube Security Feature Bypass Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-77104	7.5	1%	Sep 8	CommServe Path Traversal Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-77103	7.5	0%	Sep 8	CommServe Information Disclosure Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-77102	7.5	0%	Sep 8	CommServe Denial of Service Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20
CVE-2026-77101	7.5	0%	Sep 8	CommServe Stack-based Buffer Overflow Affected: 11.36.0 before 11.36.123; 11.40.0 before 11.40.72; 11.44.0 before 11.44.20; 11.46.0 before 11.46.20