CVE-2026-77095
HighCVSS 7.1Summary
CvFWD contained a null pointer dereference affecting service availability. The vendor recommends upgrading to the resolved maintenance release.
Risk Assessment
This may cause service crashes or outages, impacting backup environment continuity. It affects all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
Recommendation
Update all Commvault installations (CommServe, Webserver, Command Center, MediaAgents, Clients, HyperScale) to the resolved maintenance release.
Other vulnerabilities in Commvault CvFWD
See all- CVE-2026-77094High
CvFWD contained an out-of-bounds write affecting service availability. The vendor recommends upgrading to the resolved maintenance release.
- CVE-2026-77093High
CvFWD contained an integer overflow affecting service availability. The vendor recommends upgrading to the resolved maintenance release.
Original NVD description (English source)
CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS