Medium severity5.4NVD Advisory· Published Aug 20, 2025· Updated Jun 17, 2026

CVE-2025-57789

Description

During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been configured.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Commvault/Commvault2 versions
cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:commvault:commvault:*:*:*:*:*:*:*:*range: <11.36.60
- (no CPE)
Commvault/CommCellcpe-rescue
Range: 11.32.0

Patches

Vulnerability mechanics

References

documentation.commvault.com/securityadvisories/CV_2025_08_4.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000