medium6.5
CVE-2025-57788
A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials.
Impact
A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Commvault | Commvault | before 11.36.60 |