Login Request a demo
SP
Product
Service Provider Console
by Veeam · last CVE Aug 4, 2026
11
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 6High 4Medium 1Low 0
Severity
All severities11Critical6High4Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Service Provider Console to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58067
8.7
0%
Aug 4
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service
Affected: before 9.3
CVE-2024-39715
8.5
1%
Sep 7
A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitrary files to the VSPC server using REST API, leading to…
Affected: 8 through 8.0.0.19552
CVE-2024-38651
8.5
1%
Sep 7
A code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC server, which can lead to remote code execution on VSPC server
Affected: 8 through 8.0.0.19552
CVE-2026-58071
8.2
0%
Aug 4
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an…
Affected: before 9.3
Showing 4