CVE-2025-57789 - CVE House
Back to Database
Status published Medium CVE-2025-57789

Vulnerability in Initial Administrator Login Process

Vulnerability Description

During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-57789

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Sonny and Piotr Bazydlo (@chudyPB) of watchTowr

References

More from Commvault

View All →
CVE-2025-57791
Argument Injection Vulnerability in CommServe
Medium 6.9
CVE-2025-57790
Path Traversal Vulnerability
High 8.7
CVE-2025-57788
Unauthorized API Access Risk
Medium 6.9
CVE-2025-3928
Commvault Web Server unspecified vulnerability
High 8.7
CVE-2025-34136
Commvault CommServe Web Server Unauthenticated SQL Injection
Medium 6.9

Affected Vendor

Affected Software

CommCell
Vulnerable Versions:
11.32.0, 11.36.0

Timeline

Official Publish: August 20th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-257

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.