CVE-2026-77095 — CvFWD Null Pointer Dereference

CVE-2026-77095

CvFWD Null Pointer Dereference PUBLISHED

Description (CNA)

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.

Affected (CNA)

Vendor / product	Versions
Commvault / Commvault Cloud	affected 11.46.0 through 11.46.29; affected 11.44.0 through 11.44.24; affected 11.40.0 through 11.40.77; affected 11.36.0 through 11.36.126

CWE

No CWE identifiers supplied.

References

https://documentation.commvault.com/securityadvisories/CV_2026_10_5.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.