Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks
Commvault released updates for four vulnerabilities in versions before 11.36.60, credited to watchTowr Labs researchers Sonny Macdonald and Piotr Bazydlo, who reported them in April 2025. watchTowr said the flaws can be combined into two pre-authenticated...