Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-77094

CvFWD contained an out-of-bounds write affecting service availability

Risk score
45/100
CVSS
7.1 v4.0
Exploit chance (30 days)
0.2%
Published
13 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 7.1 high

References

Original description

CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale.

Last activity 13 Oct 2026. Patch Forecast updates every hour.