Back to Database
Status published
Medium
CVE-2025-57788
Unauthorized API Access Risk
Vulnerability Description
A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-57788
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Sonny and Piotr Bazydlo (@chudyPB) of watchTowr
More from Commvault
View All →CVE-2025-57791
Argument Injection Vulnerability in CommServe
Medium
6.9
CVE-2025-57790
Path Traversal Vulnerability
High
8.7
CVE-2025-57789
Vulnerability in Initial Administrator Login Process
Medium
5.3
CVE-2025-3928
Commvault Web Server unspecified vulnerability
High
8.7
CVE-2025-34136
Commvault CommServe Web Server Unauthenticated SQL Injection
Medium
6.9
Affected Vendor
Commvault
View all reports →Affected Software
CommCell
Vulnerable Versions:
11.32.0, 11.36.0
Timeline
Official Publish:
August 20th, 2025
Last Modified:
September 11th, 2025
Added to House:
July 22nd, 2026