CVE-2025-57790 is a critical path traversal vulnerability affecting Commvault products, allowing remote attackers to gain unauthorized file system access. This flaw can lead to remote code execution, posing a significant risk to affected systems. With a CVSS score of 8.8 (HIGH) and a FAUCET Risk Score of 99/100, its impact is severe, enabling full confidentiality, integrity, and availability compromise with low attack complexity. While not yet in CISA's KEV catalog, a Metasploit module for exploitation exists, and the vulnerability is generating substantial community discussion, indicating high interest from security researchers and potential attackers.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 11.36.60CPE matchmatch criteria | cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:* | ||
>= 11.32.0, <= 11.32.101CPE match | cpe:2.3:a:commvault:commcell:*:*:*:*:*:*:*:* | ||
>= 11.36.0, <= 11.36.59CPE match | cpe:2.3:a:commvault:commcell:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Path Traversal Vulnerability
Aug 19, 2025Path Traversal Vulnerability
Aug 19, 2025Path Traversal Vulnerability
Aug 19, 2025Path Traversal Vulnerability
Aug 19, 2025Path Traversal Vulnerability
Aug 19, 2025Path Traversal Vulnerability
Aug 19, 2025Path Traversal Vulnerability
Aug 19, 2025Path Traversal Vulnerability
Aug 19, 2025