C
CommVault
Security Risk Profile
67
/100
highSecurity Risk Score
Comprehensive risk assessment based on 57 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 4, 2015 to present
57
Total CVEs
45
Critical+High
6
Exploited
44
Unpatched
Threat Assessment
Avg CVSS
8.4
Base severity
Avg EPSS
12%
Exploit probability
Unpatched
44
Critical/High
Risk Level
67/100
high
⚠️ 6 Active Exploits⚡ 4 Zero-Days🆕 10Fresh (<7d)📈 17 in Last 30 Days
Severity Distribution
Critical
11High
34Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
1<5%
1Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
6
2
Buffer Overflow
5
3
SQL Injection
2
4
Input Validation
2
5
Code Injection
2
Most Affected Products
1. Commvault Commvault82
2. Commvault CommCell25
3. Commvault Edge7
4. Commvault Command Center6
5. Commvault CommServe5
Recent Vulnerabilities
See more →CVE-2026-97334
CVSS 8.7high
Network messaging layer decompression resource exhaustion
Oct 13, 2026🔧 No Patch
CVE-2026-97333
CVSS 7.1high
QAPI stack-based buffer overflow
Oct 13, 2026🔧 No Patch
CVE-2026-77100
CVSS 8.7high
MediaAgent Denial of Service
Oct 13, 2026🔧 No Patch
CVE-2026-77094
CVSS 7.1high
CvFWD Out-of-Bounds Write
Oct 13, 2026🔧 No Patch
CVE-2026-77095
CVSS 7.1high
CvFWD Null Pointer Dereference
Oct 13, 2026🔧 No Patch
CVE-2026-77093
CVSS 7.1high
CvFWD Denial of Service
Oct 13, 2026🔧 No Patch
CVE-2026-18228
CVSS 7.1high
Hyperscale Path Traversal
Oct 13, 2026🔧 No Patch
CVE-2026-77106
CVSS 7.7high
Cvlaunchd Code Execution
Sep 8, 2026🔧 No Patch
CVE-2026-77104
CVSS 8.3high
CommServe Path Traversal
Sep 8, 2026🔧 No Patch
CVE-2026-77101
CVSS 8.7high
CommServe Stack-based Buffer Overflow
Sep 8, 2026🔧 No Patch
Monitor CommVault in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.