CVE-2026-97333 — QAPI stack-based buffer overflow

CVE-2026-97333

QAPI stack-based buffer overflow PUBLISHED

Description (CNA)

QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Center and Index Server.

Affected (CNA)

Vendor / product	Versions
Commvault / Commvault Cloud	affected 11.46.0 through 11.46.29; affected 11.44.0 through 11.44.24; affected 11.40.0 through 11.40.77; affected 11.36.0 through 11.36.126

CWE

No CWE identifiers supplied.

References

https://documentation.commvault.com/securityadvisories/CV_2026_10_4.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.