Remote Admin Access Vulnerability in Commvault Software
CVE-2025-57789
5.3MEDIUM
What is CVE-2025-57789?
A security flaw has been identified in Commvault software that allows remote attackers to gain administrative control during the installation phase. This occurs before the first administrator login, as the default credentials remain unchanged. Because this exploit is limited to the initial setup phase, it poses a significant risk prior to the configuration of any jobs.
Affected Version(s)
CommCell 11.32.0 <= 11.32.101
CommCell 11.36.0 <= 11.36.59
References
EPSS Score
5% chance of being exploited in the next 30 days.
CVSS V4
Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved