VulnerabilitycriticalExploited in the wild

Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks

The Hacker Newsby @TheHackersNewsAug 21, 2025 · 16:38 UTC (Aug 21, 2025)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-57788 CVE-2025-57789 CVE-2025-57790 CVE-2025-57791 CVE-2025-34028

Tags: cve-2025-57788 cve-2025-57789 cve-2025-57790 cve-2025-57791 cve-2025-34028 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-34028	Unauthenticated Path Traversal RCE in Commvault Command Center	9.3	98%	KEVPoC	Apr 22, 2025 KEV May 2, 2025
CVE-2025-57790 +3 related CVEs CVE-2025-57791 CVE-2025-57788 CVE-2025-57789	A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue	8.7 group max	18%		Aug 20, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Aug 21, 2025 Vulnerability / Software Security Commvault has released updates to address four security gaps that could be exploited to achieve remote code execution on susceptible instances. The list of vulnerabilities, identified in Commvault versions before 11. 36.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.