Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation Confirmed

🗓️ 05 May 2025 16:01:00Reported by The Hacker NewsType

CISA lists Commvault CVE-2025-34028 as critical due to exploitation risk; fix available in newer versions.

Reporter	Title	Published	Views	Family All 54
GithubExploit	Exploit for Missing Authentication for Critical Function in Commvault	6 May 202516:44	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Commvault	17 Apr 202508:16	–	githubexploit
ATTACKERKB	CVE-2025-3928	25 Apr 202500:00	–	attackerkb
ATTACKERKB	CVE-2025-34028	22 Apr 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of CommVault’s backup and disaster recovery web server allows a perpetrator to execute arbitrary code.	5 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of CommVault’s backup and disaster recovery platform, related to incorrect restrictions on the path to the restricted-access catalog, allows a perpetrator to execute arbitrary code.	16 May 202500:00	–	bdu_fstec
Circl	CVE-2025-34028	22 Apr 202516:59	–	circl
Circl	CVE-2025-3928	25 Apr 202516:07	–	circl
CISA KEV Catalog	Commvault Command Center Path Traversal Vulnerability	2 May 202500:00	–	cisa_kev
CISA KEV Catalog	Commvault Web Server Unspecified Vulnerability	28 Apr 202500:00	–	cisa_kev