CVE-2026-97333: QAPI stack-based buffer overflow
Published Oct 13, 2026
·Updated
QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server.
Affected Software
4 affected components
Commvault CommServe
Commvault Web Server
Commvault Command Center
Commvault Index Server
Event History
Oct 13, 2026
CVE Published
via MITRE·02:27 PM
Data Sourced
via MITRE·02:27 PM
DescriptionWeakness
Frequently Asked Questions
1
Which Commvault components should be updated?
Update CommServe, Web Server, Command Center, and Index Server to the resolved maintenance release.
2
What is the impact of this issue?
The stack-based buffer overflow affects service availability.
3
What should software customers do?
Upgrade to the resolved maintenance release.