NCSC-2026-0276 [1.00] [M/H] Vulnerabilities patched in Veeam Service Provider Console

unknownCVE-2026-58073 CVE-2026-58072 CVE-2026-58067 CVE-2026-58071

Veeam has patched multiple vulnerabilities in Veeam Service Provider Console. The vulnerabilities are located in various components of Veeam Service Provider Console. An unauthorized attacker can impersonate a managed agent within the system and thereby obtain the associated login credentials. Additionally, an attacker can write arbitrary files on the management server, which can lead to remote code execution and obtaining elevated privileges. Furthermore, an unauthorized user can cause a Denial-of-Service by triggering excessive memory consumption, which affects the availability of the service. Finally, it is possible for an unauthorized attacker to gain access to the proxied appliance API with Portal Administrator privileges during the initial phase of an administrator session, due to insufficient session management and access control.

CSIRTS triage

vendor: Veeam product: Veeam Service Provider Console Authentication bypass Remote code execution Privilege escalation Denial of service

What: Multiple vulnerabilities allow agent impersonation, arbitrary file writes leading to RCE, privilege elevation, denial of service through memory exhaustion, and unauthorized API access.
Who is affected: Deployments of Veeam Service Provider Console.
Urgency: Critical urgency; remote code execution and privilege escalation are exploitable by unauthorized attackers.
Action: Apply Veeam patches for CVE-2026-58073, CVE-2026-58072, CVE-2026-58067, and CVE-2026-58071 immediately.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Veeam Service Provider Console

Get an email when a new Veeam Service Provider Console advisory drops — max one per day, one-click unsubscribe.

Details

Source: NCSC-NL Advisories (NL · national-cert · site)
Severity: unknown
Published: 2026-08-05
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://advisories.ncsc.nl/advisory?id=NCSC-2026-0276

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-580730.22% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 13% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-580720.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 30% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-580670.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all EPSS-scored CVEs.
Low exploitation riskCVE-2026-580710.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-58073	coverage & exploitation status	NVD · CVE.org
CVE-2026-58072	coverage & exploitation status	NVD · CVE.org
CVE-2026-58067	coverage & exploitation status	NVD · CVE.org
CVE-2026-58071	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Veeam Service Provider

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownCVE-2026-58073: A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impe…nvd · 2026-08-04
unknownCVE-2026-58072: A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the managem…nvd · 2026-08-04
unknownCVE-2026-58071: A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to acce…nvd · 2026-08-04
unknownCVE-2026-58067: A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exha…nvd · 2026-08-04
mediumCVE-2026-64635: Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service …nvd · 2026-07-30