NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden in Veeam ONE
view advisory published 2026-08-11
De kwetsbaarheden betreffen meerdere softwarecomponenten van Veeam ONE, waaronder agents en services die met verhoogde privileges draaien, evenals systemen die rapporten delen via gedeelde links en backend databases gebruiken.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-64634US | — | — | ||
A vulnerability allowing local privilege escalation to the Reporter service context. | ||||
| CVE-2026-64633US | — | Exploit | ||
A vulnerability allowing remote unauthenticated code execution on the agent host. | ||||
| CVE-2026-64631US | — | — | ||
A vulnerability allowing a low-privileged user to inject SQL and extract database contents. | ||||
| CVE-2026-64630US | —OT elevated | — | ||
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link. | ||||
| CVE-2026-58075US | — | — | ||
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally. | ||||
| CVE-2026-58074US | — | — | ||
A vulnerability allowing a high-privileged user to execute arbitrary code on the server. | ||||
02
references
External citations — patches, advisories, analysis.
- Referenceexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan