poslední zpráva · zachyceno
SPOJENO PŘES CVE EPSS 0.01 (nejvyšší)
Critical vulnerabilities in Veeam Management Pack for Microsoft System Center Collector service
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.3, CVEs: CVE-2026-107239, CVE-2026-107238, CVE-2023-22793, Summary: CVE-2026-107239 (CVSS: 8.8): A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service. CVE-2026-107238 (CVSS: 8.7): A vulnerability allowing an authenticated domain user to perform…
CVE v události 3
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2023-22793 | 9.3 4.0 · hackerone | – | 0.01 |
| CVE-2026-107238 | 8.7 4.0 · hackerone | – | 0.00 |
| CVE-2026-107239 | 8.8 4.0 · hackerone | – | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.3.
Jak se o tom psalo 3
-
· zachyceno · NCSC-FI FI nadpis události
Critical vulnerabilities in Veeam Management Pack for Microsoft System Center Collector service
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.3, CVEs: CVE-2026-107239, CVE-2026-107238, CVE-2023-22793, Summary: CVE-2026-107239 (CVSS: 8.8): A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service. CVE-2026-107238 (CVSS: 8.7): A vulnerability allowing an authenticated domain user to perform…
-
· CSIRT Itálie (ACN) IT
Sanate vulnerabilità in prodotti Veeam
Veeam ha rilasciato aggiornamenti di sicurezza per sanare 3 vulnerabilità, di cui una con gravità “critica” e 2 con gravità “alta”, in Veeam Management Pack for Microsoft System Center, componente utilizzato per il monitoraggio di infrastrutture virtualizzate e ambienti Veeam tramite Microsoft System Center. Tali vulnerabilità potrebbero consentire a un attaccante remoto, in alcuni casi non autenticato, di eseguire codice arbitrario sui sistemi interessati.
-
· zachyceno · CERT-FR – avis FR
Multiples vulnérabilités dans Veeam Management Pack (30 octobre 2026)
De multiples vulnérabilités ont été découvertes dans Veeam Management Pack. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.