DeutschShown in its original language — a full translation is planned for a future version.
Veeam ONE: Mehrere Schwachstellen
view advisory published 2026-08-04
Ein Angreifer kann mehrere Schwachstellen in Veeam ONE ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen, SQL-Injektionen durchzuführen oder Berechtigungen zu erweitern.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-64632US | — | — | ||
A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account. | ||||
| CVE-2026-64634US | — | — | ||
A vulnerability allowing local privilege escalation to the Reporter service context. | ||||
| CVE-2026-64633US | — | Exploit | ||
A vulnerability allowing remote unauthenticated code execution on the agent host. | ||||
| CVE-2026-64631US | — | — | ||
A vulnerability allowing a low-privileged user to inject SQL and extract database contents. | ||||
| CVE-2026-64630US | —OT elevated | — | ||
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link. | ||||
| CVE-2026-58075US | — | — | ||
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally. | ||||
| CVE-2026-58074US | — | — | ||
A vulnerability allowing a high-privileged user to execute arbitrary code on the server. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan