Medium severity · published Oct 7, 2026
CVE-2026-58068
This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Agent for Windows · Veeam
before 13.1 · source: vendor
Affected product
AF
Agent for Windows
Veeam
More from Agent for Windows
4.1
CVE-2025-64391
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it