CVE-2026-77093

Awaiting Analysis Awaiting Analysis - Queue

Integer Overflow in Commvault Software Affecting Availability

Publication date: 2026-10-13

Last updated on: 2026-10-14

Assigner: Commvault

Description

CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-13

EPSS Evaluated

2026-10-18

NVD

CVE-2026-77093

EUVD

EUVD-2026-98757

Affected Vendors & Products

Vendor	Product	Version / Range
Commvault	Commvault	Cloud 11.46.0
Commvault	Commvault	Cloud 11.44.0
Commvault	Commvault	Cloud 11.40.0
Commvault	Commvault	Cloud 11.36.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

CVE-2026-77093 is an integer overflow vulnerability in CvFWD that affects service availability. It allows potential disruption of Commvault services due to improper handling of integer values.

Detection Guidance

This vulnerability is specific to Commvault software and requires checking installed versions. Run 'cvfwd --version' or check Commvault services in your system's service manager to identify outdated installations.

Impact Analysis

This vulnerability can lead to service outages or crashes in Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients, and HyperScale. It may cause downtime or reduced functionality.

Compliance Impact

The vulnerability (CVE-2026-77093) causes a denial of service (DoS) due to an integer overflow, disrupting service availability. This could impact compliance with standards like GDPR or HIPAA by compromising data availability, potentially leading to violations of availability requirements in these regulations.

Mitigation Strategies

Upgrade all Commvault components including CommServe, Webserver, Command Center, MediaAgents, Clients, and HyperScale to the latest resolved maintenance release as instructed by Commvault.

Hi! I’m here to help you understand CVE-2026-77093. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70