Advisories · Technology

Commvault Cloud.

Every CVE that names Commvault Cloud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97334 CVE record

CVSS 8.7 High

Network messaging layer decompression resource exhaustion
- Commvault Cloud
- CWE-409
Not analysed yet 13 Oct 2026
CVE-2026-97333 CVE record

CVSS 7.1 High

QAPI stack-based buffer overflow
- Commvault Cloud
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-77100 CVE record

CVSS 8.7 High

MediaAgent Denial of Service
- Commvault Cloud
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-77099 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

CVFS Command Execution
- Commvault Cloud
- Commvault Grid(HSX) CVFS
- Command injection
Not analysed yet 13 Oct 2026
CVE-2026-77096 CVE record

CVSS 7.7 High

CVFS Missing Authentication
- Commvault Cloud
- Commvault Grid(HSX) CVFS
- Authentication bypass
Not analysed yet 13 Oct 2026
CVE-2026-77095 CVE record

CVSS 7.1 High

CvFWD Null Pointer Dereference
- Commvault Cloud
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-77094 CVE record

CVSS 7.1 High

CvFWD Out-of-Bounds Write
- Commvault Cloud
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-77093 CVE record

CVSS 7.1 High

CvFWD Denial of Service
- Commvault Cloud
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-77090 CVE record

CVSS 8.7 High

CVFS Information Disclosure
- Commvault Cloud
- Commvault Grid(HSX) CVFS
- XML external entities (XXE)
Not analysed yet 13 Oct 2026
CVE-2026-18228 CVE record

CVSS 7.1 High

Hyperscale Path Traversal
- Commvault Cloud
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-77106 CVE record

CVSS 7.7 High

Cvlaunchd Code Execution
- Commvault Cloud
- Broken access control
Not analysed yet 8 Sept 2026
CVE-2026-77105 CVE record

CVSS 8.7 High

CommServe Privilege Escalation
- Commvault Cloud
- Weak cryptography or TLS
Not analysed yet 8 Sept 2026
CVE-2026-77104 CVE record

CVSS 8.3 High

CommServe Path Traversal
- Commvault Cloud
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-77103 CVE record

CVSS 8.7 High

CommServe Information Disclosure
- Commvault Cloud
- Authentication bypass
Not analysed yet 8 Sept 2026
CVE-2026-77102 CVE record

CVSS 8.7 High

CommServe Denial of Service
- Commvault Cloud
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77101 CVE record

CVSS 8.7 High

CommServe Stack-based Buffer Overflow
- Commvault Cloud
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-77098 CVE record

CVSS 8.8 High

Private Metrics Server SQL Injection
- Commvault Cloud
- SQL injection
Not analysed yet 8 Sept 2026
CVE-2026-77097 CVE record

CVSS 8.8 High

Private Metrics Server Denial of Service
- Commvault Cloud
- Authentication bypass
Not analysed yet 8 Sept 2026
CVE-2026-77092 CVE record

CVSS 7.3 High

Content Extractor Privilege Escalation
- Commvault Cloud
- Insecure deserialization
Not analysed yet 8 Sept 2026
CVE-2026-77091 CVE record

CVSS 8.5 High

DataCube Security Feature Bypass
- Commvault Cloud
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-77089 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Command Center API Authentication Bypass
- Commvault Cloud
- Authentication bypass
Not analysed yet 8 Sept 2026
CVE-2026-13738 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Improper Authorization Validation
- Commvault Cloud
- Broken access control
Not analysed yet 11 Aug 2026
CVE-2026-13737 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Command Restriction Bypass
- Commvault Cloud
- Broken access control
Not analysed yet 11 Aug 2026
CVE-2026-13739 CVE record

CVSS 8.8 High

Server-Side Request Forgery (SSRF)
- Commvault Cloud
- Server-side request forgery (SSRF)
Not analysed yet 11 Aug 2026