---
id: CVE-2026-97334
title: >-
  The network messaging layer contained improper handling of highly compressed
  data affecting service availability
summary: >-
  The network messaging layer contained improper handling of highly compressed
  data affecting service availability.  Software customers upgrade to resolved
  maintenance release. Update all Commvault installations, including CommServe
  server…
severity: high
cwe:
  - CWE-409
published: '2026-10-13'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T16:04:11.750'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97334'
references:
  - url: 'https://documentation.commvault.com/securityadvisories/CV_2026_10_3.html'
    label: 050066fd-a2f9-4f32-ab5d-4c53f48bc333
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-13T15:33:40.087Z'
vendor: Commvault
product: Commvault Cloud
affected:
  - cloud >= 11.46.0 <= 11.46.29
  - cloud >= 11.44.0 <= 11.44.24
  - cloud >= 11.40.0 <= 11.40.77
  - cloud >= 11.36.0 <= 11.36.126
cvss: 8.7
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-13T14:40:07.536505Z'
cvssSource: cna
epss: 0.00356
epssPercentile: 0.29092
---

## Overview

The network messaging layer contained improper handling of highly compressed data affecting service availability.  Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and HyperScale.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.