59 matches found
CVE-2026-58073-check
Veeam Service Provider Console 代理模拟 — 补丁状态检测脚本 这是一个安全、无需认证的检测器，用于检测 KB4893 中描述的 Veeam Service Provider Console 漏洞（发布于 2026-08-04）。它针对每个目标只回答一个问题，且在任何认证或 TLS 之前：该控制台是否已应用 KB4893 修复？ 最核心的一对漏洞构成了一条攻击链。CVE-2026-58073 （CVSS 9.5）允许未认证的网络对等方模拟已连接的管理代理，并获得该代理的真实证书，因为代理握手是根据对等方写入其 自身 证书中的 GUID...
CVE-2026-58071
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...
CVE-2026-58067
Vulnerability CVE-2026-58067 affects Veeam Service Provider Console. An unauthenticated attacker can exhaust host memory via a network-based attack, leading to denial of service (high impact on availability). No explicit root cause or affected versions are stated in the provided documents beyond ...
CVE-2026-58073
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials...
CVE-2026-58072
A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution...
CVE-2026-58072
CVE-2026-58072 : The vulnerability affects the Veeam Service Provider Console. It enables arbitrary file write on the management server, which can lead to remote code execution. The CVSS v4.0 score is 9.0 (CRITICAL) with network attack vector, no user interaction, and high impacts on confidential...
CVE-2026-58071
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...
CVE-2026-58067
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service...
CVE-2026-58072
A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution...
CVE-2026-58071
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...
EUVD-2026-52752
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service...
CVE-2026-58071
The vulnerability CVE-2026-58071 affects the Veeam Service Provider Console. An unauthenticated attacker can access the proxied appliance API as Portal Administrator during a short window after an administrator session begins. This could expose sensitive API controls to an unauthenticated user wi...
Vulnerabilities Resolved in Veeam Service Provider Console 9.3
All vulnerabilities documented in this article were resolved in Veeam Service Provider Console 9.3.0.35057. Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure...
CVE-2026-64635
CVE-2026-64635 affects Veeam Service Provider Console. An improper handling of the returnUrl parameter in Forgot Password enables an unauthenticated attacker to hijack the password-reset link domain, causing the reset code to be sent to an attacker-controlled host and potentially take over the us...
EUVD-2026-51018
Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...
CVE-2026-64635
Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to...
Veeam Service Provider Console < 9.2.1.33875 (kb4856)
The version of Veeam Service Provider Console installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4856 advisory. - This vulnerability in Veeam Service Provider Console allows for remote code execution. CVE-2026-32998 Note...
CVE-2026-32998
This vulnerability in Veeam Service Provider Console allows for remote code execution...
Veeam Service Provider Console < 9.2.1.33875 (kb4853)
The version of Veeam Service Provider Console installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the kb4853 advisory. - This vulnerability in Veeam Service Provider Console allows for remote code execution. CVE-2026-329...