CVE-2025-57790: Commvault

High severity, CVSS 8.8. EPSS: 27% chance of exploitation in the next 30 days.

A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue. The vulnerability may lead to remote code execution.

Affected products

• Commvault Commvault: before 11.36.60 (fixed in 11.36.60)

Published 2025-08-20. Last modified 2026-06-17.