Description
Commvault是一款数据保护或网络弹性解决方案，为企业备份和复制套件。 Commvault存在任意文件上传漏洞。恶意攻击者可使服务器下载远程webshell到本地从而获取服务器权限。
Commvault /commandcenter/deployServiceCommcell.do 文件上传漏洞（CVE-2025-34028）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-34028
https://labs.watchtowr.com/fire-in-the-hole-were-breaching-the-vault-commvault-remote-code-execution-cve-2025-34028/
https://documentation.commvault.com/securityadvisories/CV_2025_04_1.html
https://blog.csdn.net/m0_46699477/article/details/147566902
https://www.cnblogs.com/gobybot/p/18850200
https://cn-sec.com/archives/3996895.html
https://github.com/watchtowrlabs/watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028
https://www.cve.org/CVERecord?id=CVE-2025-34028
https://www.runzero.com/blog/commvault-command-center/