Commvault Gridhsx Cvfs vulnerabilities

3 CVEs affecting Commvault Gridhsx Cvfs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-77099, published 2026-10-13.

More from Commvault.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-77099, published 2026-10-13. Critical severity, CVSS 9.3. EPSS: 0.4% chance of exploitation in the next 30 days. CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.
• CVE-2026-77090, published 2026-10-13. High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days. CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS.
• CVE-2026-77096, published 2026-10-13. High severity, CVSS 7.7. EPSS: 0.2% chance of exploitation in the next 30 days. CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS.