https://vulnogram.org/ Most recent CVEs assigned by Commvault Systems Inc. (commvault). https://vulnogram.org/seaview/icons/commvault.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-97334 https://vulnogram.org/CVE-2026-97334 The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server,… High Tue, 13 Oct 2026 14:27:01 GMT https://vulnogram.org/CVE-2026-97333 https://vulnogram.org/CVE-2026-97333 QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server. High Tue, 13 Oct 2026 14:27:01 GMT https://vulnogram.org/CVE-2026-77100 https://vulnogram.org/CVE-2026-77100 MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale. High Tue, 13 Oct 2026 14:27:01 GMT https://vulnogram.org/CVE-2026-77099 https://vulnogram.org/CVE-2026-77099 CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS. Critical Tue, 13 Oct 2026 14:27:00 GMT https://vulnogram.org/CVE-2026-77096 https://vulnogram.org/CVE-2026-77096 CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS. High Tue, 13 Oct 2026 14:27:00 GMT https://vulnogram.org/CVE-2026-77095 https://vulnogram.org/CVE-2026-77095 CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperS… High Tue, 13 Oct 2026 14:27:00 GMT https://vulnogram.org/CVE-2026-77094 https://vulnogram.org/CVE-2026-77094 CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, We… High Tue, 13 Oct 2026 14:27:00 GMT https://vulnogram.org/CVE-2026-77093 https://vulnogram.org/CVE-2026-77093 CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale High Tue, 13 Oct 2026 14:26:59 GMT https://vulnogram.org/CVE-2026-77090 https://vulnogram.org/CVE-2026-77090 CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS. High Tue, 13 Oct 2026 14:26:59 GMT https://vulnogram.org/CVE-2026-18228 https://vulnogram.org/CVE-2026-18228 HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperScale MediaAgents. High Tue, 13 Oct 2026 14:26:59 GMT https://vulnogram.org/CVE-2026-77106 https://vulnogram.org/CVE-2026-77106 Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents,… High Tue, 08 Sep 2026 12:12:55 GMT https://vulnogram.org/CVE-2026-77105 https://vulnogram.org/CVE-2026-77105 CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server. High Tue, 08 Sep 2026 12:12:54 GMT https://vulnogram.org/CVE-2026-77104 https://vulnogram.org/CVE-2026-77104 CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe. High Tue, 08 Sep 2026 12:12:54 GMT https://vulnogram.org/CVE-2026-77103 https://vulnogram.org/CVE-2026-77103 CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe. High Tue, 08 Sep 2026 12:12:54 GMT https://vulnogram.org/CVE-2026-77102 https://vulnogram.org/CVE-2026-77102 CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe. High Tue, 08 Sep 2026 12:12:54 GMT https://vulnogram.org/CVE-2026-77101 https://vulnogram.org/CVE-2026-77101 CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe. High Tue, 08 Sep 2026 12:12:54 GMT https://vulnogram.org/CVE-2026-77098 https://vulnogram.org/CVE-2026-77098 Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server. High Tue, 08 Sep 2026 12:12:53 GMT https://vulnogram.org/CVE-2026-77097 https://vulnogram.org/CVE-2026-77097 Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintenance release. Update Private Metrics Server. High Tue, 08 Sep 2026 12:12:53 GMT https://vulnogram.org/CVE-2026-77092 https://vulnogram.org/CVE-2026-77092 Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor. High Tue, 08 Sep 2026 12:12:53 GMT https://vulnogram.org/CVE-2026-77091 https://vulnogram.org/CVE-2026-77091 DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store. High Tue, 08 Sep 2026 12:12:53 GMT https://vulnogram.org/CVE-2026-77089 https://vulnogram.org/CVE-2026-77089 Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Command Center. Critical Tue, 08 Sep 2026 12:12:53 GMT https://vulnogram.org/CVE-2026-13738 https://vulnogram.org/CVE-2026-13738 CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command… Critical Tue, 11 Aug 2026 11:01:39 GMT https://vulnogram.org/CVE-2026-13737 https://vulnogram.org/CVE-2026-13737 CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Age… Critical Tue, 11 Aug 2026 11:01:38 GMT https://vulnogram.org/CVE-2026-13739 https://vulnogram.org/CVE-2026-13739 A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs. Software customers upgrade to resolved maintenance release. Update Command Center. High Tue, 11 Aug 2026 11:01:38 GMT https://vulnogram.org/CVE-2025-12776 https://vulnogram.org/CVE-2025-12776 The Report Builder component of the application stores user input directly in a web page and displays it to other users, which raised concerns about a possible Cross-Site Scripting (XSS) attack. Proper management of this functionality helps ensure a… Low Wed, 07 Jan 2026 22:03:05 GMT