CVE-2026-77094CWE-787

CVE-2026-77094

published October 13, 2026

CVSS
7.1
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.

The record
Technical detail
CVSS
7.1 · NONE
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00226 · 12.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-10-13T19:17Z
References (1)
https://documentation.commvault.com/securityadvisories/CV_2026_10_1.html · 050066fd-a2f9-4f32-ab5d-4c53f48bc333
EPSS history
Timeline
  • 15 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 13 OCT 14:27Z
    CvFWD Out-of-Bounds Write
    cvelistv5
  • 13 OCT 14:27Z
    CvFWD Out-of-Bounds Write
    cvelistv5