Commvault security advisories, October 2026

Every Commvault security advisory published in October 2026, from Commvault Cloud Security Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 11
Critical: 1
High: 9
In CISA KEV: 0
CVEs: 10

Commvault advisories published in October 2026

Oct 13, 2026
Critical [CVE-2026-77099] CVFS Command Execution
Critical9.3
Oct 13, 2026
High [CVE-2026-77090] CVFS Information Disclosure
High8.7
Oct 13, 2026
High [CVE-2026-77093] CvFWD Denial of Service
High7.1
Oct 13, 2026
High [CVE-2026-77094] CvFWD Out-of-Bounds Write
High7.1
Oct 13, 2026
High [CVE-2026-77095] CvFWD Null Pointer Dereference
High7.1
Oct 13, 2026
High [CVE-2026-77096] CVFS Missing Authentication
High7.7
Oct 13, 2026
High [CVE-2026-77100] Media Agent Denial of Service
High8.7
Oct 13, 2026
High [CVE-2026-18228] HyperScale Path Traversal
High7.1
Oct 13, 2026
High [CVE-2026-97333] QAPI stack-based buffer overflow
High7.1
Oct 13, 2026
High [CVE-2026-97334] Network messaging layer decompression resource exhaustion
High8.7
Oct 13, 2026
Medium CVFS Information Disclosure
Medium6.9

Get an email when Commvault publishes the next one.

See Commvault's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Commvault

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.