Tag

#cve-2025-34028

1 post tagged #cve-2025-34028.

Field Note · Jun 22, 2026 · Colten Anderson

Commvault CVE-2025-34028: upgrading to 11.38.20 is not the whole fix

CVE-2025-34028 gives pre-auth RCE on Commvault Command Center. The patch landed in April and the federal deadline passed in May, but the fix requires supplemental update packages beyond the base version, and most shops check the version number and stop there.