Veeam ONE < 13.1.0.7233 (kb4905)

The version of Veeam ONE installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4905 advisory. - A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. CVE-2026-6564...

Vulnerability Resolved in Veeam ONE 13.1 Patch 0

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

How to Apply Custom Settings in Veeam Backup for Microsoft 365 Using Set-VBOConfigurationParameter

Purpose This article explains how to use the Set-VBOConfigurationParameter cmdlet to apply a custom configuration setting within a Veeam Backup for Microsoft 365 deployment. Solution How the Scripts in This Article Are Used Every script in this article begins with the same three variables, which...

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam's console that hands over a managed agent's credentials, rated 9.5 A cross-tenant...

CVE-2026-58067

creationtimestamp| type| source ---|---|--- 2026-08-05 12:45:13+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...

CVE-2026-58071

creationtimestamp| type| source ---|---|--- 2026-08-05 12:45:11+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1 2026-08-05 13:05:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p...

CVE-2026-58071

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...

CVE-2026-58073

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials...

CVE-2026-58067

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service...

CVE-2026-58072

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution...

CVE-2026-58072

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution...

EUVD-2026-52761

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution...

EUVD-2026-52753

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...

CVE-2026-58073

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials...

EUVD-2026-52758

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials...

CVE-2026-58067

Vulnerability CVE-2026-58067 affects Veeam Service Provider Console. An unauthenticated attacker can exhaust host memory via a network-based attack, leading to denial of service (high impact on availability). No explicit root cause or affected versions are stated in the provided documents beyond ...

CVE-2026-58071

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...

CVE-2026-58072

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution...

CVE-2026-58072

CVE-2026-58072 : The vulnerability affects the Veeam Service Provider Console. It enables arbitrary file write on the management server, which can lead to remote code execution. The CVSS v4.0 score is 9.0 (CRITICAL) with network attack vector, no user interaction, and high impacts on confidential...

CVE-2026-58071

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins...