C
CommVault
Security Risk Profile
74
/100
highSecurity Risk Score
Comprehensive risk assessment based on 50 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 4, 2015 to present
50
Total CVEs
38
Critical+High
6
Exploited
37
Unpatched
Threat Assessment
Avg CVSS
8.6
Base severity
Avg EPSS
12%
Exploit probability
Unpatched
37
Critical/High
Risk Level
74/100
high
⚠️ 6 Active Exploits⚡ 4 Zero-Days🆕 21Fresh (<7d)📈 21 in Last 30 Days
Severity Distribution
Critical
11High
27Medium
5Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
1<5%
1Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
5
2
Buffer Overflow
4
3
SQL Injection
2
4
Input Validation
2
5
Malicious File Upload
2
Most Affected Products
1. Commvault Commvault80
2. Commvault CommCell25
3. Commvault Edge7
4. Commvault Command Center5
5. Commvault web servers5
Recent Vulnerabilities
See more →CVE-2026-77106
CVSS 7.7high
Cvlaunchd Code Execution
Sep 8, 2026🔧 No Patch
CVE-2026-77104
CVSS 8.3high
CommServe Path Traversal
Sep 8, 2026🔧 No Patch
CVE-2026-77101
CVSS 8.7high
CommServe Stack-based Buffer Overflow
Sep 8, 2026🔧 No Patch
CVE-2026-77103
CVSS 8.7high
CommServe Information Disclosure
Sep 8, 2026🔧 No Patch
CVE-2026-77102
CVSS 8.7high
CommServe Denial of Service
Sep 8, 2026🔧 No Patch
CVE-2026-77105
CVSS 8.7high
CommServe Privilege Escalation
Sep 8, 2026🔧 No Patch
CVE-2026-77098
CVSS 8.8high
Private Metrics Server SQL Injection
Sep 8, 2026🔧 No Patch
CVE-2026-77089
CVSS 9.3critical
Command Center API Authentication Bypass
Sep 8, 2026🔧 No Patch
CVE-2026-77091
CVSS 8.5high
DataCube Security Feature Bypass
Sep 8, 2026🔧 No Patch
CVE-2026-77097
CVSS 8.8high
Private Metrics Server Denial of Service
Sep 8, 2026🔧 No Patch
Monitor CommVault in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.