Firetruck

CVE-2025-3928

KEV
Updated Oct 7, 2026 · PUBLISHED
View KEV entry →

Description

Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Web ServerCommvault / Web Server>= 11.20.0, < 11.20.217affected
Web ServerCommvault / Web Server11.20.217unaffected
Web ServerCommvault / Web Server>= 11.28.0, < 11.28.141affected
Web ServerCommvault / Web Server11.28.141unaffected
Web ServerCommvault / Web Server>= 11.32.0, < 11.32.89affected
Web ServerCommvault / Web Server11.32.89unaffected
Web ServerCommvault / Web Server>= 11.36.0, < 11.36.46affected
Web ServerCommvault / Web Server11.36.46unaffected