Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-77095

CvFWD Null Pointer Dereference

Description

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Commvault Commvault Cloud

Default version status: unknown

  • 11.46.0 to ≤ 11.46.29affected
  • 11.44.0 to ≤ 11.44.24affected
  • 11.40.0 to ≤ 11.40.77affected
  • 11.36.0 to ≤ 11.36.126affected

References