CVE-2026-58071

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins.

Score

CVSS 4.0 8.2 High

Status

Awaiting Analysis - support@hackerone.com

Published

2026-08-04

Last modified

2026-10-24

Weaknesses

CWE-306

Affected products

• Service Provider Console (Veeam)

References

• https://www.veeam.com/kb4893