« Back to list

Commvault

Commvault Hyperscale: vulnerabilities and CVEs

Commvault Hyperscale has 2 published vulnerabilities, 2 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs2
Last 12 months2
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-77100High (8.7)——Oct 13, 2026
MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale.
CVE-2026-18228High (7.1)——Oct 13, 2026
HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperScale MediaAgents.

🎯 How it gets exploited (ATT&CK techniques)

  1. T1005 Data from Local System1
  2. T1190 Exploit Public-Facing Application1
  3. T1210 Exploitation of Remote Services1
  4. T1499 Endpoint Denial of Service1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Commvault