CVE-2026-107238

Vendor

Veeam

Product

Management Pack for Microsoft System Center

CVSS v4.0

8.7 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

0.004 (p39)

Weakness

CWE-502

Exposure class

Backup

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 28
   CVE NVD 2d ago

   A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam…

   A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.

   CVSS 8.7 CVE-2026-107238 Veeam