unnamed
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS 050066fd-a2f9-4f32-ab5d-4c53f48bc333
03
assessed vulnerabilities (29)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-97334US | — | — | ||
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Updat… | ||||
| CVE-2026-97333US | — | — | ||
QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Cent… | ||||
| CVE-2026-77100US | — | — | ||
MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation o… | ||||
| CVE-2026-77099US | — | — | ||
CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS. | ||||
| CVE-2026-77096US | —OT elevated | — | ||
CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS. | ||||
| CVE-2026-77095US | — | — | ||
CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, includin… | ||||
| CVE-2026-77094US | — | — | ||
CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenan… | ||||
| CVE-2026-77093US | — | — | ||
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommS… | ||||
| CVE-2026-77090US | — | — | ||
CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS. | ||||
| CVE-2026-18228US | — | — | ||
HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperSca… | ||||
| CVE-2026-77106US | high8.8OT elevated | — | ||
Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault instal… | ||||
| CVE-2026-77105US | high8.8 | — | ||
CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and We… | ||||
| CVE-2026-77104US | high7.5 | — | ||
CommServe contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update CommServe. | ||||
| CVE-2026-77103US | high7.5OT elevated | — | ||
CommServe contained an authentication bypass issue affecting access authorization and information disclosure. Software customers upgrade to resolved maintenance release. Update Com… | ||||
| CVE-2026-77102US | high7.5 | — | ||
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe. | ||||
| CVE-2026-77101US | high7.5 | — | ||
CommServe contained a stack-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe. | ||||
| CVE-2026-77098US | critical9.8 | — | ||
Private Metrics Server contained an SQL injection condition affecting database operations. Software customers upgrade to resolved maintenance release. Update Private Metrics Server… | ||||
| CVE-2026-77097US | high8.2OT elevated | — | ||
Private Metrics Server contained a missing authentication condition affecting metrics upload functionality and service availability. Software customers upgrade to resolved maintena… | ||||
| CVE-2026-77092US | critical9.8 | — | ||
Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Ext… | ||||
| CVE-2026-77091US | high7.8 | — | ||
DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Sto… | ||||