๐Ÿ” CVE Alert

CVE-2026-77095

UNKNOWN 0.0

CvFWD Null Pointer Dereference

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.

Vendor commvault
Product commvault cloud
Published Oct 13, 2026
Stay Ahead of the Next One

Get instant alerts for commvault commvault cloud

Be the first to know when new unknown vulnerabilities affecting commvault commvault cloud are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Commvault / Commvault Cloud
11.46.0 โ‰ค 11.46.29 11.44.0 โ‰ค 11.44.24 11.40.0 โ‰ค 11.40.77 11.36.0 โ‰ค 11.36.126

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
documentation.commvault.com: https://documentation.commvault.com/securityadvisories/CV_2026_10_5.html

Credits

๐Ÿ” Michael Tucker and Tan Chew Keong from the XOR team at JPMorgan Chase.