CVE-2026-77100
HighCVSS 8.7Summary
A vulnerability in MediaAgent (part of Commvault) involves a heap-based buffer overflow affecting service availability. Customers are advised to upgrade to the resolved maintenance release.
Risk Assessment
Buffer overflow could lead to crashes of MediaAgents and HyperScale, potentially disrupting backup and recovery processes.
Recommendation
Update Commvault installations of MediaAgents and HyperScale to the patched release.
Other vulnerabilities in Commvault
See all- CVE-2026-97334High
A vulnerability in the network messaging layer of Commvault involves improper handling of highly compressed data affecting service availability. Customers are advised to upgrade to the resolved maintenance release.
- CVE-2026-97333High
A vulnerability in QAPI (part of Commvault) involves a stack-based buffer overflow affecting service availability. Customers are advised to upgrade to the resolved maintenance release.
- CVE-2026-77096High
A vulnerability in CVFS (part of Commvault) involves a missing authentication condition affecting command execution. Customers are advised to upgrade to the resolved maintenance release.
- CVE-2026-77106High
Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers should upgrade to the resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Original NVD description (English source)
MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS