High severity · published Aug 4, 2026
CVE-2026-58071
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an…
8.2
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SP
Service Provider Console · Veeam
before 9.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-58071
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-58071
www.veeam.com
https://www.veeam.com/kb4893
More from Service Provider Console
9.9
CVE-2024-38650
An authentication bypass vulnerability can allow a low privileged attacker to access the NTLM hash of service account on the VSPC server
9.9
CVE-2024-39714
A code injection vulnerability that permits a low-privileged user to upload arbitrary files to the server, leading to remote code execution on VSPC server
9.5
CVE-2026-58073
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials
9.4
CVE-2026-32998
This vulnerability in Veeam Service Provider Console allows for remote code execution
9.0
CVE-2026-58072
A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution