Security Research & Guidance
Security Center
Security research and threat guidance from Commvault’s security team. For full CVE disclosures and technical advisories, visit our Security Advisories documentation.
The Landscape
What’s changed in how vulnerabilities are found and disclosed?
Discovery is faster
Close to 48,000 CVEs were published in 2025, roughly 130 a day.
The old signal is thinning
The National Vulnerability Database has moved to selective, risk-based processing.
The window is closing
Working exploit code can now appear before a patch is widely deployed.
From the Security Center
Start your journey here
The Window Between Discovery And Exploit Is Closing
The rapid growth in vulnerabilities and AI-enabled discovery is shrinking the time between vulnerability disclosure and active exploitation.
Rajiv Kottomtharayil, Chief Products Officer, Commvault
AI & Innovation
The Window Between Discovery And Exploit Is Closing
The rapid growth in vulnerabilities and AI-enabled discovery is shrinking the time between vulnerability disclosure and active exploitation.
Rajiv Kottomtharayil, Chief Products Officer, Commvault
The Anatomy of a CVE: How Commvault Protects Its Customers
A CVE is a globally unique identifier for a publicly disclosed software vulnerability, enabling vendors, researchers, and defenders to reference the same flaw consistently.
Werner Nel, Principal Product Experience, Commvault
Cyber Resilience & Data Security
The Anatomy of a CVE: How Commvault Protects Its Customers
A CVE is a globally unique identifier for a publicly disclosed software vulnerability, enabling vendors, researchers, and defenders to reference the same flaw consistently.
Werner Nel, Principal Product Experience, Commvault
Trust & Compliance
Backed by independent certification
Our compliance posture is documented and independently audited. View our full certifications andassurancedocumentation in theTrust Center.
Frequently Asked Questions
What is Commvault doing around AI-assisted security testing?
We actively evaluate our products using AI-assisted methods as part of our structured security engineering program, in Commvault-controlled environments, under the same governance as every other form of testing.
How is Commvault preparing for AI-driven vulnerability discovery?
Our program is model-agnostic and tool-agnostic by design, so we can incorporate new methods inside one consistent governance framework.
Is Commvault using these models safely?
Yes. All evaluation happens on isolated hardware or Commvault-managed cloud infrastructure. Source code never leaves our boundaries, and every AI-generated finding requires human confirmation before action.
How is Commvault scaling vulnerability management for the AI era?
We’re investing in risk-based triage and remediation infrastructure so the response process can scales with discovery volume, not just the discovery itself.
Have a question about an advisory, or something to report?
Browse our security advisories, or reach our team directly.
