Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-57791

51
FAUCET Score

CVE-2025-57791 is a medium-severity command-line argument injection vulnerability affecting Commvault products, allowing remote attackers to gain a low-privilege user session due to insufficient input validation. With a CVSS score of 6.5, it is easily exploitable over the network without user interaction, leading to potential data compromise and integrity issues. While not yet in CISA's KEV catalog, a Metasploit module exists, and the vulnerability has garnered significant community discussion, indicating a high potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
< 11.36.60CPE matchmatch criteria
cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*
>= 11.32.0, <= 11.32.101CPE match
cpe:2.3:a:commvault:commcell:*:*:*:*:*:*:*:*
>= 11.36.0, <= 11.36.59CPE match
cpe:2.3:a:commvault:commcell:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

6.9MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
LOW
VS Integrity
LOW
VS Availability
NONE
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
21.43%
Probability of exploitation in next 30 days
EPSS Percentile
97.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
Metasploit: Commvault Command-Line Argument Injection to Traversal Remote Code Execution · Aug 19, 2025
This CVE's current EPSS score of 0.2143 is in the 97th percentile among its peer group of 23,690 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

barracudapatch availablevia llm_extracted
boschpatch availablevia llm_extracted
clamavpatch availablevia llm_extracted
consulpatch availablevia llm_extracted
freshrsspatch availablevia llm_extracted
qdrantpatch availablevia llm_extracted
symantecpatch availablevia llm_extracted
verbbpatch availablevia llm_extracted

Vendor Advisories (8)

barracudallm-barracuda-ddef84d76db869f6

Argument Injection Vulnerability in CommServe

Aug 19, 2025
symantecllm-symantec-395f09290e9d0361

Argument Injection Vulnerability in CommServe

Aug 19, 2025
verbbllm-verbb-b9356bf5d69f2a27

Argument Injection Vulnerability in CommServe

Aug 19, 2025
consulllm-consul-4f6a69f027cc8aef

Argument Injection Vulnerability in CommServe

Aug 19, 2025
clamavllm-clamav-43adb9ca28abc653

Argument Injection Vulnerability in CommServe

Aug 19, 2025
boschllm-bosch-4da5219d2ee9bff8

Argument Injection Vulnerability in CommServe

Aug 19, 2025
freshrssllm-freshrss-c72cd51c4f9e1871

Argument Injection Vulnerability in CommServe

Aug 19, 2025
qdrantllm-qdrant-f2b2c9c32133e29f

Argument Injection Vulnerability in CommServe

Aug 19, 2025

References

documentation.commvault.com / securityadvisories/CV_2025_08_1.html
Vendor Advisory