CVE-2026-58067

CVSS: 8.7 High
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Risk score: 69.6
Published: 2026-08-04
Status: Published

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service.

Weaknesses

CWE-789

Coverage 2

vulnerability

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug

HashiCorp, Veeam, and Django have released critical patches to address several vulnerabilities, including a cross-tenant credential reuse flaw in Terraform MCP Server, a multi-tenant console credential impersonation issu…

The Hacker News · Aug 5, 2026 High

CVE-2026-58073 CVE-2026-58072 CVE-2026-58067 credential-reuse remote-code-execution spatial-data

vulnerability

Multiples vulnérabilités dans les produits Veeam (05 août 2026)

Multiple vulnerabilities have been discovered in Veeam products, including vulnerabilities that could allow for remote code execution, privilege escalation, and denial of service attacks. These issues affect Service Prov…

CERT-FR · Aug 5, 2026 High

CVE-2026-58067 CVE-2026-58071 CVE-2026-58072 vulnerability patch remote code execution

All articles mentioning it

Advisories and references

veeam.com/kb4893