coldbraid

CVE-2025-34028 Commvault Command Center

Commvault Command Center contains a path traversal vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code.

CVSS
not scored

CWE-22

On CISA’s exploited list

Commvault Command Center Path Traversal Vulnerability

Added
2025-05-02
Federal patch deadline
2025-05-23
Ransomware use
not known