Commvault Command Center Innovation Release - Path Traversal (CVE-2025-34028)

CVE-2025-34028 is a critical vulnerability in Commvault Command Center that allows unauthenticated attackers to achieve remote code execution by abusing a path traversal flaw during ZIP file uploads.

CrowdSec has been tracking this vulnerability and its exploits since 29th of April 2025.

According to CrowdSec data, while opportunistic exploitation dominates, a portion of threat actors trying to exploit CVE-2025-34028 apply basic targeting methods such as port or service detection. This indicates emerging patterns of selective targeting. Additionally, according to week-over-week analysis by CrowdSec, exploitation of CVE-2025-34028 is surging. Attack volumes are spiking well above historical norms, indicating widespread and escalating interest from threat actors. CVE-2025-34028 is currently experiencing high visibility and active exploitation across the internet.

Observed exploitation efforts typically target requests to the /commandcenter/deploywebpackage.do endpoint.