CVE-2026-97334
HighCVSS 8.7Summary
A vulnerability in the network messaging layer of Commvault involves improper handling of highly compressed data affecting service availability. Customers are advised to upgrade to the resolved maintenance release.
Risk Assessment
An attacker could exploit this vulnerability to cause service disruption, potentially leading to unavailability of backup systems and loss of data recovery capability.
Recommendation
Update all Commvault installations, including CommServe, Web Server, Command Center, MediaAgents, clients, and HyperScale, to the patched release.
Other vulnerabilities in Commvault
See all- CVE-2026-97333High
A vulnerability in QAPI (part of Commvault) involves a stack-based buffer overflow affecting service availability. Customers are advised to upgrade to the resolved maintenance release.
- CVE-2026-77100High
A vulnerability in MediaAgent (part of Commvault) involves a heap-based buffer overflow affecting service availability. Customers are advised to upgrade to the resolved maintenance release.
- CVE-2026-77096High
A vulnerability in CVFS (part of Commvault) involves a missing authentication condition affecting command execution. Customers are advised to upgrade to the resolved maintenance release.
- CVE-2026-77106High
Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers should upgrade to the resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.
Original NVD description (English source)
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS