CO
Product
Commvault
by Commvault · last CVE Sep 8, 2026
On CISA KEVExploited in the wild
24
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 8High 11Medium 5Low 0
Watch

Add Commvault to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-34136
6.9
1%
Jul 25
Commvault CommServe Web Server Unauthenticated SQL Injection
Affected: 11.32.0 through 11.32.93; 11.36.0 through 11.36.51; 11.38.0 through 11.38.19
CVE-2025-57791
6.5
39%
Aug 20
Argument Injection Vulnerability in CommServe
Affected: before 11.36.60
CVE-2025-57788
6.5
8%
Aug 20
Unauthorized API Access Risk
Affected: before 11.36.60
CVE-2025-12776
5.4
0%
Jan 7
Stored Cross-Site Scripting
Affected: 11.36.0 through 11.36.68; 11.32.0 through 11.32.112
CVE-2025-57789
5.4
1%
Aug 20
Vulnerability in Initial Administrator Login Process
Affected: before 11.36.60
Showing 5