EIP-2026-118379

This Metasploit module exploits a command injection vulnerability in Commvault Communications Service (cvd.exe) on Windows, allowing arbitrary command execution as SYSTEM without authentication. It constructs a malicious packet to trigger the vulnerability and delivers a PowerShell payload.