Commvault
In 10 briefs, most recently 22 August 2025. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
2 Commvault vulnerabilities are on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2025-34028 Commvault Command Center Path Traversal Vulnerability
- CVE-2025-3928 Commvault Web Server Unspecified Vulnerability
Coverage in DanSec Daily
- Colt Technology breach by Warlock ransomware, Apple zero-day patch, and Scattered Spider member sentenced to 10 years.
- Adidas and MathWorks breaches, the DragonForce MSP ransomware attack via SimpleHelp, and Void Blizzard's NGO phishing campaigns.
- Chinese UAT-6382 exploits Trimble Cityworks to breach US local governments; Ivanti EPMM flaws hit European, North American and Asian agencies; 184M credentials …
- Langflow and Samsung MagicINFO RCE exploitation, GeoVision devices feeding Mirai botnets, and the UK Legal Aid Agency incident.
- TeleMessage's breach and suspended services, the Darcula SMS phishing platform stealing 884,000 cards, and UK retail attacks prompting new NCSC guidance.
- Harrods cyberattack amid UK retail spree, Commvault zero-day CVE-2025-3928 breach, and NullBulge's Disney Slack data theft guilty plea.
- SonicWall SMA100 exploitation, Co-op cyberattack disruption and Ascension healthcare data breach.
- SK Telecom's USIM breach and SIM replacements, APT28's attribution by France, and the AirBorne AirPlay zero-click RCE flaws.
- Marks & Spencer ransomware disruption by Scattered Spider, SAP NetWeaver CVE-2025-31324 exploitation, and Hitachi Vantara Akira attack.
- Healthcare breaches dominate: Yale New Haven Health exposes 5.5M patients, Interlock leaks DaVita data, and Lazarus Group targets South Korean firms with …