CVE-2026-97334 — Network messaging layer decompression resource exhaustion

CVE-2026-97334

Network messaging layer decompression resource exhaustion PUBLISHED

Description (CNA)

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.

Affected (CNA)

Vendor / product	Versions
Commvault / Commvault Cloud	affected 11.46.0 through 11.46.29; affected 11.44.0 through 11.44.24; affected 11.40.0 through 11.40.77; affected 11.36.0 through 11.36.126

CWE

No CWE identifiers supplied.

References

https://documentation.commvault.com/securityadvisories/CV_2026_10_3.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.