CVE-2026-77100
Received Received - Intake

Heap Overflow in Commvault MediaAgent

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Commvault

Description
MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation of MediaAgents and HyperScale.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-77100
EUVD
EUVD-2026-98762

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Commvault Commvault Cloud 11.46.0
Commvault Commvault Cloud 11.44.0
Commvault Commvault Cloud 11.40.0
Commvault Commvault Cloud 11.36.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a heap-based buffer overflow in MediaAgent that can disrupt service availability. It allows unauthorized access or manipulation of memory, potentially causing crashes or instability in Commvault Cloud systems.

Detection Guidance

To detect this vulnerability, check the installed version of Commvault MediaAgent against the fixed versions listed in the advisory (11.46.30+, 11.44.25+, 11.40.78+, 11.36.127+). Use the Commvault Command Center to verify versions via Manage > Servers or Manage > Infrastructure > Servers.

Impact Analysis

The vulnerability may lead to service disruptions, data corruption, or unauthorized access to Commvault Cloud environments. Customers should upgrade to the fixed maintenance release to mitigate risks.

Compliance Impact

The vulnerability could lead to a denial of service (DoS) affecting service availability, which may disrupt data processing and access. This could impact compliance with standards like GDPR or HIPAA by compromising data availability, integrity, or security requirements.

Mitigation Strategies

Upgrade Commvault MediaAgents and HyperScale installations to the resolved maintenance release provided by Commvault to address the heap-based buffer overflow issue affecting service availability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-77100. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart