Multiple vulnerabilities have been identified in Veeam products, including remote code execution, privilege escalation, and denial-of-service risks. Affected systems include Service Provider Console versions prior to 9.3.0.35057 and Veeam ONE versions before 13.1.0.7034. Attackers could exploit these flaws to compromise data confidentiality, bypass security policies, or execute arbitrary code. Veeam has issued security bulletins (kb4892 and kb4893) with patches. Users are advised to apply the updates promptly. The vulnerabilities are tracked under CVE identifiers CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, and CVE-2026-64633. Further details are available in the provided documentation.
Summary of content from
Made by AI. If you spot anything of concern write us at contact@cybach.com. We’ll promptly correct irregularities.