- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/21/2026, Commvault Cloud recorded 24 security vulnerabilities in the last 90 days, of which 24 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Commvault Cloud and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-97334Network messaging layer decompression resource exhaustionCVE-2026-97333QAPI stack-based buffer overflowCVE-2026-77100MediaAgent Denial of ServiceCVE-2026-77099CVFS Command ExecutionCVE-2026-77096CVFS Missing Authentication| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-97334Network messaging layer decompression resource exhaustion | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-97333QAPI stack-based buffer overflow | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-77100MediaAgent Denial of Service | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-77099CVFS Command Execution | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityCritical |
CVE-2026-77096CVFS Missing Authentication | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-77095CvFWD Null Pointer Dereference | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-77094CvFWD Out-of-Bounds Write | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-77093CvFWD Denial of Service | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-77090CVFS Information Disclosure | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
CVE-2026-18228Hyperscale Path Traversal | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
24 Results | Page 1 of 3