CVE-2026-77093: CvFWD Denial of Service
Published Oct 13, 2026
·Updated
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale
Affected Software
1 affected component
Commvault CvFWD
Event History
Oct 13, 2026
CVE Published
via MITRE·02:26 PM
Data Sourced
via MITRE·02:26 PM
DescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverity
Frequently Asked Questions
1
Which parts of a Commvault deployment should be updated?
Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients, and HyperScale.
2
What should organizations do to remediate the issue?
Upgrade to the resolved maintenance release provided for software customers.