CVE-2026-97334: Commvault Cloud

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.

Affected products

• Commvault Commvault Cloud: from 11.46.0, up to and including 11.46.29; from 11.44.0, up to and including 11.44.24; from 11.40.0, up to and including 11.40.77; from 11.36.0, up to and including 11.36.126

Published 2026-10-13. Last modified 2026-10-14.