Vulnerabilityhigh
Commvault plugs holes in backup suite that allow remote code execution
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-34028 | Unauthenticated Path Traversal RCE in Commvault Command Center | 9.3 | 98% | KEVPoC | KEV |
CVE-2025-57790+3 related CVEs | A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue | 8.7 group max | 18% |
From the original article
3 min read at helpnetsecurity.com
Commvault has fixed four security vulnerabilities that may allow unauthenticated attackers to compromise on-premises deployments of its flagship backup and replication suite. Technical details about the vulnerabilities have been published on Wednesday by researchers at watchTowr Labs, who also proved that they could be chained together to achieve remote code execution.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.