Product by Commvault
Commvault Cloud
24 known vulnerabilities in Commvault Cloud (Commvault), 0 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-77089 | Command Center API Authentication Bypass | 9.8 | |
| Critical | CVE-2026-13738 | Improper Authorization Validation | 9.8 | |
| Critical | CVE-2026-13737 | Command Restriction Bypass | 9.8 | |
| High | CVE-2026-77106 | Cvlaunchd Code Execution | 8.8 | |
| Critical | CVE-2026-77098 | Private Metrics Server SQL Injection | 9.8 | |
| Critical | CVE-2026-13739 | Server-Side Request Forgery (SSRF) | 9.8 | |
| High | CVE-2026-77104 | CommServe Path Traversal | 7.5 | |
| Critical | CVE-2026-77099 | CVFS Command Execution | — | |
| High | CVE-2026-77103 | CommServe Information Disclosure | 7.5 | |
| High | CVE-2026-77097 | Private Metrics Server Denial of Service | 8.2 | |
| High | CVE-2026-77101 | CommServe Stack-based Buffer Overflow | 7.5 | |
| High | CVE-2026-77102 | CommServe Denial of Service | 7.5 | |
| Critical | CVE-2026-77092 | Content Extractor Privilege Escalation | 9.8 | |
| High | CVE-2026-97334 | Network messaging layer decompression resource exhaustion | — | |
| High | CVE-2026-77090 | CVFS Information Disclosure | — | |
| High | CVE-2026-77100 | MediaAgent Denial of Service | — | |
| High | CVE-2026-77105 | CommServe Privilege Escalation | 8.8 | |
| High | CVE-2026-18228 | Hyperscale Path Traversal | — | |
| High | CVE-2026-77096 | CVFS Missing Authentication | — | |
| High | CVE-2026-77091 | DataCube Security Feature Bypass | 7.8 | |
| High | CVE-2026-97333 | QAPI stack-based buffer overflow | — | |
| High | CVE-2026-77095 | CvFWD Null Pointer Dereference | — | |
| High | CVE-2026-77094 | CvFWD Out-of-Bounds Write | — | |
| High | CVE-2026-77093 | CvFWD Denial of Service | — |