// CVE · PUBLISHED 2026-08-04
CVE-2026-58073 Veeam / Service Provider Console
9.5 · CVSS 4.0 Critical
Description A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.
Details Products Veeam / Service Provider Console Published 4 Aug 2026 Modified 24 Oct 2026 CVSS 9.5 Critical (v4.0) Vector CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Score source support@hackerone.com CWE CWE-288 Record status Awaiting Analysis