CVE Catalog

CVE-2026-58073

CriticalCVSS 9.5
Published: Updated: Translated: NVD NIST

Summary

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent and obtain that agent's credentials.

Risk Assessment

An attacker can impersonate an agent and gain access to sensitive data or systems, potentially compromising the entire infrastructure.

Recommendation

Apply vendor-provided patches and monitor agent activity for unusual behavior.

Original NVD description (English source)

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS