cvedb.io
CVE-2025-57789
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2025-08-20T04:16:03.847 · Last modified 2026-06-17T09:43:26.180

Summary

During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

Affected products

commvault — commvault

Does this affect you?

Add your gear to cvedb and we'll alert you only when commvault ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.