CVE-2026-18228
Received Received - Intake

Path Traversal in Commvault HyperScale

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Commvault

Description
HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperScale MediaAgents.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-18228
EUVD
EUVD-2026-98755

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Commvault Commvault Cloud 11.46.0
Commvault Commvault Cloud 11.44.0
Commvault Commvault Cloud 11.40.0
Commvault Commvault Cloud 11.36.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

HyperScale contained a path traversal issue that allowed unauthorized access to sensitive information. This flaw could enable attackers to read files outside intended directories, potentially exposing confidential data.

Detection Guidance

To detect this vulnerability, check if your Commvault HyperScale MediaAgent versions fall within the affected range (11.36.0-11.46.29). Verify installed versions via the Command Center under Manage > Servers or Manage > Infrastructure > Servers. Compare against resolved versions starting from 11.36.127, 11.40.78, 11.44.25, and 11.46.30.

Impact Analysis

This vulnerability may lead to unauthorized information disclosure, compromising sensitive data stored on affected systems. Attackers could exploit it to access files they should not, risking data breaches or leaks.

Compliance Impact

The vulnerability allows unauthorized information disclosure due to a path traversal issue in HyperScale. This could lead to exposure of sensitive data, potentially violating compliance requirements under GDPR or HIPAA, which mandate strict controls over data access and confidentiality. Unauthorized disclosure risks non-compliance with these regulations.

Mitigation Strategies

Upgrade HyperScale to the resolved maintenance release as advised by Commvault to address the path traversal issue affecting information disclosure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18228. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart