Vulnerabilidades do Veeam ONE
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Veeam ONE: 8 registro(s), com versões afetadas e correções.
CVE-2026-65641
Crítica · 9.3
CWE-288 26/08/2026
Authentication Bypass Using an Alternate Path or Channel em Veeam ONE
A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.
CVE-2026-64632
Alta · 8.5
CWE-522 26/08/2026
Insufficiently Protected Credentials em Veeam ONE
A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.
CVE-2026-64634
Alta · 8.4
CWE-269 04/08/2026
Improper Privilege Management em Veeam ONE
A vulnerability allowing local privilege escalation to the Reporter service context.
CVE-2026-64633
Crítica · 10.0
CWE-94 04/08/2026
Code Injection em Veeam ONE
A vulnerability allowing remote unauthenticated code execution on the agent host.
CVE-2026-64631
Alta · 8.6
CWE-89 04/08/2026
SQL Injection em Veeam ONE
A vulnerability allowing a low-privileged user to inject SQL and extract database contents.
CVE-2026-64630
Média · 5.3
CWE-863 04/08/2026
Incorrect Authorization em Veeam ONE
A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.
CVE-2026-58075
Alta · 8.7
CWE-287 04/08/2026
Improper Authentication em Veeam ONE
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.
CVE-2026-58074
Alta · 8.6
CWE-94 04/08/2026
Code Injection em Veeam ONE
A vulnerability allowing a high-privileged user to execute arbitrary code on the server.