8.5High

CVE-2026-64632

Veeam ONE Published: (2 months ago)

Description

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.

Weakness (CWE): CWE-522

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Veeam ONE ≤ 13.0.2

References and patches