EUVD-2026-113415

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution RCE on servers running the Veeam Management Pack for Microsoft System Center Collector service...

EUVD-2026-113416

A vulnerability allowing an authenticated domain user to perform remote code execution RCE as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service...

EUVD-2023-60727

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

CVE-2023-22793

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution RCE on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2026-107238

A vulnerability allowing an authenticated domain user to perform remote code execution RCE as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2026-107239

The Veeam Management Pack for Microsoft System Center Collector service is vulnerable to Remote Code Execution (RCE) (CVE-2026-107239). This flaw allows a member of the Veeam Virtualization Extensions Users group to execute arbitrary code on affected servers. The vulnerability was discovered duri...

CVE-2026-107238

A vulnerability allowing an authenticated domain user to perform remote code execution RCE as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2023-22793

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

CVE-2026-107238

A vulnerability in the Veeam Management Pack for Microsoft System Center Collector service allows an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account . This flaw was identified during internal testing and impacts Veeam Management Pack for Microsoft Syste...

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution RCE on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2023-22793

The Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center is vulnerable to a Critical remote code execution (RCE) flaw (CVE-2023-22793 ). This vulnerability allows an unauthenticated attacker to execute arbitrary code on affected servers. The flaw was discov...

Vulnerabilities Resolved in Veeam Management Pack for Microsoft System Center 13.1

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Release Information for Veeam Management Pack for Microsoft System Center 13.1

Requirements Please confirm that you are running version 9a build 9.1.0.3107 prior to upgrading, as upgrade to version 13.1 is supported from this version only. You can check this in the Operations Manager console under Administration, Management Packs section. After upgrading, your build number...

CVE-2023-22793: Veeam Management Pack for Microsoft System Center: A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the…

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

PT-2026-132855

Name of the Vulnerable Software and Affected Versions Veeam Management Pack for Microsoft System Center versions prior to 13.1.0.334 Description An unauthenticated attacker can perform remote code execution RCE on servers running the Veeam Virtualization Extensions service. This allows the attack...

PT-2026-132856

NØØT Security Alerts 🚨 ALERT — Domain User Can Gain SYSTEM-Level Code Execution on Veeam Servers October 29, 2026 PRODUCT: Veeam Management Pack for Microsoft System Center. CVE: CVE-2026-107238 SEVERITY: HIGH — CVSS 8.7 v4.0. AFFECTED: Version 9.1 and earlier version 9 builds, including the Veea...

PT-2026-132857

NØØT Security Alerts 🚨 ALERT — Remote Code Execution via Veeam Virtualization Extensions Group October 29, 2026 PRODUCT: Veeam Management Pack for Microsoft System Center. CVE: CVE-2026-107239 SEVERITY: HIGH — CVSS 8.8 v4.0. AFFECTED: Version 9.1 and earlier version 9 builds, including the Veeam...

CVE-2026-107238: Veeam Management Pack for Microsoft System Center: A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account…

A vulnerability allowing an authenticated domain user to perform remote code execution RCE as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2026-107239: Veeam Management Pack for Microsoft System Center: A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution…

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution RCE on servers running the Veeam Management Pack for Microsoft System Center Collector service...