cyfenced.com →

[ CVE-2026-108142 · Published 27 Oct 2026 ]

Vulnerability in Veeam Backup and Replication

CVSS 9.1 EPSS <1%2 agency advisoriesFix available

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.1

[ Description ]Official description

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1399

    Multiple vulnerabilities in Veeam products Translated from French

    Multiple vulnerabilities have been discovered in Veeam products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

    CVE-2026-108142CVE-2025-64394CVE-2026-106077+6 more CVEs
  • BSI CERT-BundWID-SEC-2026-4212

    Veeam Backup & Replication: Multiple vulnerabilities Translated from German

    CVE-2026-108141CVE-2026-105477CVE-2026-108140+1 more CVEs

[ References ]References