watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028

PoC

watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028

view exploit source poc_in_githubauthor watchtowrlabspublished 2025-04-17catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-34028UScritical10.0OT criticalKEV
The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vu…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan