CVE-2026-77094: CvFWD Out-of-Bounds Write
Published Oct 13, 2026
·Updated
CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
Affected Software
1 affected component
Commvault CvFWD
Event History
Oct 13, 2026
CVE Published
via MITRE·02:27 PM
Data Sourced
via MITRE·02:27 PM
DescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverity
Frequently Asked Questions
1
Which Commvault installation roles should be updated?
Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients, and HyperScale.
2
What should organizations do to remediate the issue?
Upgrade Commvault software to the resolved maintenance release.