PT-2026-111601 · Commvault · Commvault
CVE-2026-77094
·
Published
2026-10-13
·
Updated
2026-10-13
CVSS v4.0
7.1
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Commvault (affected versions not specified)
Description
CvFWD contains an out-of-bounds write, which is a condition where data is written outside the intended memory boundary, potentially affecting service availability.
Recommendations
Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients, and HyperScale, to the resolved maintenance release.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Commvault