CVE-2026-77095: CvFWD Null Pointer Dereference
Published Oct 13, 2026
·Updated
CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
Affected Software
1 affected component
Commvault Commvault
Event History
Oct 13, 2026
CVE Published
via MITRE·02:27 PM
Data Sourced
via MITRE·02:27 PM
DescriptionWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverity
Frequently Asked Questions
1
Which Commvault components should be updated?
Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients, and HyperScale.
2
What is the impact of this issue?
The null pointer dereference affects service availability.
3
What should organizations do to remediate the issue?
Upgrade Commvault software to the resolved maintenance release.