CVEs we hold for Commvault

Records whose assigning authority named Commvault as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-77106Cvlaunchd Code ExecutionCommvault Cloud

CVE-2026-77105CommServe Privilege EscalationCommvault Cloud

CVE-2026-77104CommServe Path TraversalCommvault Cloud

CVE-2026-77103CommServe Information DisclosureCommvault Cloud

CVE-2026-77102CommServe Denial of ServiceCommvault Cloud

CVE-2026-77101CommServe Stack-based Buffer OverflowCommvault Cloud

CVE-2026-77098Private Metrics Server SQL InjectionCommvault Cloud

CVE-2026-77097Private Metrics Server Denial of ServiceCommvault Cloud

CVE-2026-77092Content Extractor Privilege EscalationCommvault Cloud

CVE-2026-77091DataCube Security Feature BypassCommvault Cloud

CVE-2026-77089Command Center API Authentication BypassCommvault Cloud

CVE-2026-13739Server-Side Request Forgery (SSRF)Commvault Cloud

CVE-2026-13738Improper Authorization ValidationCommvault Cloud

CVE-2026-13737Command Restriction BypassCommvault Cloud

CVE-2025-57791Argument Injection Vulnerability in CommServeCommvault CommCell

CVE-2025-57790Path Traversal VulnerabilityCommvault CommCell

CVE-2025-57789Vulnerability in Initial Administrator Login ProcessCommvault CommCell

CVE-2025-57788Unauthorized API Access RiskCommvault CommCell

CVE-2025-3928Commvault Web Server unspecified vulnerabilityCommvault Web Server

CVE-2025-34136Commvault CommServe Web Server Unauthenticated SQL InjectionCommvault

CVE-2025-34028Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path TraversalCommvault Command Center Innovation Release

CVE-2025-12776Stored Cross-Site ScriptingCommvault WebConsole

CVE-2024-13976Commvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL InjectionCommvault for Windows

CVE-2024-13975Commvault 11.20.0 - 11.36.0 Windows Access Nodes Compromise via Local File Server Agent AbuseCommvault

CVE-2021-34997no title heldCommvault CommCell

CVE-2021-34996no title heldCommvault CommCell

CVE-2021-34995no title heldCommvault CommCell

CVE-2021-34994no title heldCommvault CommCell

CVE-2021-34993no title heldCommvault CommCell

CVE-2017-3195no title heldCommvault Service Pack 6

30 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.