# Commvault security incidents · pwn.watch

> Security incidents tagged Commvault (vendor, product, platform or attack type).

Page: https://pwn.watch/t/commvault · generated 2026-10-23T03:01:01.167Z

## Status (as of 2026-10-23)
- Incidents: 2 (0 live, 0 live and not fully patched, 2 patched)
- Days without a Commvault security incident: 539
- Newest incident started: 2025-05-02

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/commvault.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/commvault/feed.xml
- This file: https://pwn.watch/t/commvault/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Commvault Command Center: Command Center Path Traversal Vulnerability](https://pwn.watch/i/commvault-command-center-cve-2025-34028) ([json](https://pwn.watch/i/commvault-command-center-cve-2025-34028.json)): critical, closed, patched, started 2025-05-02, CVE-2025-34028
- [Commvault Web Server: Web Server Unspecified Vulnerability](https://pwn.watch/i/commvault-web-server-cve-2025-3928) ([json](https://pwn.watch/i/commvault-web-server-cve-2025-3928.json)): high, closed, patched, started 2025-04-28, CVE-2025-3928