Commvault security advisory (AV26-1033)
Canada's Cyber Centre warns Commvault Cloud and CVFS versions need updates under advisory AV26-1033.
The Canadian Centre for Cyber Security published AV26-1033 on October 13, 2026, warning of vulnerabilities in Commvault Cloud and Grid (HSX) CVFS. Listed Commvault Cloud builds include 11.36.0 before 11.36.127, 11.40.0 before 11.40.78, 11.44.0 before 11.44.25, and 11.46.0 before 11.46.30 and 11.46.40. CVFS 5.0.1.0 before 5.0.14.5 is also affected. No CVE identifiers or exploitation details are included; administrators are told to review Commvault advisories and apply updates.
- Alert AV26-1033 covers Commvault Cloud and HSX CVFS.
- Cloud branches 11.36, 11.40, 11.44, and 11.46 need specified updates.
- CVFS 5.0.1.0 before 5.0.14.5 is affected.
- No CVE identifiers or active exploitation are stated.
- Vendors
- Commvault
- Products
- Commvault CloudCVFS
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1033 Date: October 13, 2026 As of October 13, 2026, Commvault is affected by vulnerabilities in the following products: Commvault Cloud 11. 36. 0 Prior to 11.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.