Multiple vulnerabilities in Veeam products (August 26, 2026)
Multiple vulnerabilities have been discovered in Veeam products. They allow an attacker to cause data confidentiality breach and security policy bypass.
CSIRTS triage
- What
- Multiple vulnerabilities in Veeam products enable data confidentiality breaches and security policy bypass.
- Who is affected
- Veeam product users.
- Urgency
- High; confidentiality breach and policy bypass impact reported.
- Action
- Identify which Veeam products are affected and apply corresponding patches.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1080/
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-58070 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-65641 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownCVE-2026-65641: A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from…nvd
- unknownCVE-2026-58070: A vulnerability that records guest OS processing credentials in cleartext in a support log on …nvd
- medium[NEW] [medium] Veeam Backup & Replication: Vulnerability enables Information Disclosurecert-bund
- high[NEW] [high] Veeam ONE: Vulnerability enables Security Bypasscert-bund
- unknownVeeam Backup & Replication Information Disclosure Vulnerabilityhkcert
Recent advisories for Veeam products
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownMultiple vulnerabilities in Veeam products (August 5, 2026)cert-fr-avis · 2026-08-05
More from CERT-FR Avis de sécurité
- unknownMultiple vulnerabilities in Google Chrome (August 26, 2026)2026-08-26
- unknownMultiple vulnerabilities in Apache Tomcat (August 26, 2026)2026-08-26
- unknownVulnerability in Apereo CAS (August 26, 2026)2026-08-26
- unknownMultiple vulnerabilities in SonicWall NetExtender (August 26, 2026)2026-08-26
- unknownMultiple vulnerabilities in OpenSSL (August 26, 2026)2026-08-26