CVE-2025-34028

Exploited in the Wild ✓ Confirmed 0-Day
Triaged: March 20, 2026 3 articles

EPSS Score

Source: FIRST.org · 2026-05-24
49.25%
probability
This CVE has a 49.25% probability of being exploited in the next 30 days.
0% Top 97.8th percentile of all CVEs 100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

Exploits & PoC

watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028

PoC CVE-2025-34028 — watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028

21
Mattb709/CVE-2025-34028-PoC-Commvault-RCE

Proof-of-Concept (PoC) for CVE-2025-34028, a Remote Code Execution vulnerability in Commvault Command Center. This Python script scans single or multi

2
2 repos — triés par ⭐ Rechercher sur GitHub ↗

Signal Intelligence

Confidence
92%
EPSS 49.25%
Mentions 3

CNA Information

Analyst Note

CVE-2025-34028 is explicitly listed in CISA KEV catalog with active exploitation confirmed, as documented in the third article. The vulnerability affects Commvault Command Center with critical severity (CVSS 9.0), and CISA's addition to KEV occurred approximately one week post-disclosure, strongly indicating in-the-wild exploitation before or shortly after patch availability.

Threat Actors 2

Rocke
apt_group 🇨🇳 CN
Mana Team
apt_group 🇨🇳 CN

Triage Info

Decided atMar 20, 2026