CVE-2026-77094
HighCVSS 7.1Summary
CvFWD contained an out-of-bounds write affecting service availability. The vendor recommends upgrading to the resolved maintenance release.
Risk Assessment
This may cause service crashes or outages, and potentially unintended code execution. It affects all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
Recommendation
Update all Commvault installations (CommServe, Webserver, Command Center, MediaAgents, Clients, HyperScale) to the resolved maintenance release.
Other vulnerabilities in Commvault CvFWD
See all- CVE-2026-77095High
CvFWD contained a null pointer dereference affecting service availability. The vendor recommends upgrading to the resolved maintenance release.
- CVE-2026-77093High
CvFWD contained an integer overflow affecting service availability. The vendor recommends upgrading to the resolved maintenance release.
Original NVD description (English source)
CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS