Researchers disclosing their findings said 'it's as bad as it sounds' Updated Researchers at watchTowr just published working ...

Commvault patched four flaws before 11.36.60, including CVE-2025-57790 (8.7 CVSS), preventing remote code execution.

Storage firm Commvault fixes four vulnerabilities that combined, create a pair of RCE exploit chains that could be used to target on-prem customers with ransomware and other nasties.