CVE-2025-57789

Published: Aug 20, 2025

Modified: Feb 26, 2026

PUBLISHED

Description

During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

Vendor	Product	Versions
Commvault	CommCell	affected `11.32.0 - <= 11.32.101` affected `11.36.0 - <= 11.36.59`

Weaknesses (CWE)

CWE-257

References

https://documentation.commvault.com/securityadvisories/CV_2025_08_4.html

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-57789

Description

Affected Products

Weaknesses (CWE)

References