CVE-2025-57791: Commvault

Medium severity, CVSS 6.5. EPSS: 34.4% chance of exploitation in the next 30 days.

A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful exploitation results in a valid user session for a low privilege role.

Affected products

• Commvault Commvault: before 11.36.60 (fixed in 11.36.60)

Published 2025-08-20. Last modified 2026-06-17.