CVE-2026-97334 | BDVDB-2026-388012 Detail
CommvaultCommvault Cloud
Description#
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.
Impact#
Per CVSS v4.0: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.