Known Vulnerabilities for products from Commvault
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Commvault".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77106 json | Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to re... | Not Provided | 2026-09-08 | 2026-09-11 |
| CVE-2026-77105 json | CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade t... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-77104 json | CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenan... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-77103 json | CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software custom... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-77102 json | CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-77101 json | CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolve... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-77098 json | Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to reso... | Not Provided | 2026-09-08 | 2026-09-11 |
| CVE-2026-77097 json | Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availa... | Not Provided | 2026-09-08 | 2026-09-11 |
| CVE-2026-77092 json | Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgr... | Not Provided | 2026-09-08 | 2026-09-11 |
| CVE-2026-77091 json | DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved main... | Not Provided | 2026-09-08 | 2026-09-11 |
| CVE-2026-77089 json | Command Center API contained an authentication bypass issue affecting privilege management. Software customers upgrade to res... | Not Provided | 2026-09-08 | 2026-09-11 |
| CVE-2026-13739 json | A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to ... | Not Provided | 2026-08-11 | 2026-09-09 |
| CVE-2026-13738 json | CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Software ... | Not Provided | 2026-08-11 | 2026-09-11 |
| CVE-2026-13737 json | CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upgrade ... | Not Provided | 2026-08-11 | 2026-09-09 |
| CVE-2021-34997 json | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22... | 8.8 - HIGH | 2022-01-13 | 2022-01-22 |
| CVE-2021-34996 json | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22... | 8.8 - HIGH | 2022-01-13 | 2022-01-22 |
| CVE-2021-34995 json | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22... | 8.8 - HIGH | 2022-01-13 | 2022-01-22 |
| CVE-2021-34994 json | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22... | 8.8 - HIGH | 2022-01-13 | 2023-06-26 |
| CVE-2021-34993 json | This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22.... | 9.8 - CRITICAL | 2022-01-13 | 2022-01-22 |
| CVE-2020-25780 json | In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Direct... | 7.5 - HIGH | 2020-10-29 | 2020-11-13 |
Known software with vulnerabilities from Commvault
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Commvault | Active Directory Idataagent | 9.0.0 |
| Application | Commvault | Base Client | 9.0.0 |
| Application | Commvault | Commcell | 14.68 |
| Application | Commvault | Commcell Console | 9.0.0 |
| Application | Commvault | Commnet Browser | 9.0.0 |
| Application | Commvault | Commserve | 9.0.0 |
| Application | Commvault | Commvault | 11.0 |
| Application | Commvault | Continuous Data Replicator | 9.0.0 |
| Application | Commvault | Continuous Data Replicator Vss Provider | 9.0.0 |
| Application | Commvault | Edge | 11.0.0 |
| Application | Commvault | Exchange Database Idataagent | 9.0.0 |
| Application | Commvault | Exchange Mailbox Archiver Agent | 9.0.0 |
| Application | Commvault | Exchange Webproxy Archiver Agent | 9.0.0 |
| Application | Commvault | Exchange Web Proxy Archiver Agent | 9.0.0 |
| Application | Commvault | File System Idataagent | 9.0.0 |
| Application | Commvault | Galaxy | - |
| Application | Commvault | Media Agent | 9.0.0 |
| Application | Commvault | Owa Proxy Enabler | 9.0.0 |
| Application | Commvault | Resource Pack | 9.0.0 |
| Application | Commvault | Sql Server Idataagent | 9.0.0 |