Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-57788

Unauthorized API Access Risk

Description

A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Commvault CommCell

Default version status: unaffected

  • 11.32.0 to ≤ 11.32.101affected
  • 11.36.0 to ≤ 11.36.59affected

References