CVE-2026-77094 — CvFWD Out-of-Bounds Write

CVE-2026-77094

CvFWD Out-of-Bounds Write PUBLISHED

Description (CNA)

CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.

Affected (CNA)

Vendor / product	Versions
Commvault / Commvault Cloud	affected 11.46.0 through 11.46.29; affected 11.44.0 through 11.44.24; affected 11.40.0 through 11.40.77; affected 11.36.0 through 11.36.126

CWE

No CWE identifiers supplied.

References

https://documentation.commvault.com/securityadvisories/CV_2026_10_1.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.