You likely saw recent coverage of newly disclosed PHP vulnerabilities affecting software vendors across the industry. Here's a clear update on how Commvault responded. We acted quickly to assess and address the reported vulnerabilities, proactively deploying patches in accordance with security guidance. We have found no evidence of exploitation or business impact.
On-premise Threatwise deployments require customers to apply patches within their own environments, and we are working directly with those customers to support remediation.
The vast majority of customers do not need to take any action, as their products are either unaffected or have already been patched by Commvault. For the limited number of customers requiring action, we have proactively reached out with clear guidance and are supporting them directly through the patching process.
What customers should do
Watch for communication from Commvault. Connect with your success team if you have questions.
Thank you for your trust.
