CVE-2026-58072

CriticalCVSS 9.0

Published: 04/08/2026(UTC)Updated: 05/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remote code execution.

An attacker can write malicious files to the management server, potentially enabling remote code execution and full system compromise.

Apply vendor-provided patches and restrict access to the management server.

Original NVD description (English source)

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.