Skip to contentVeeam Service Provider Console vulnerabilities
- veeam service provider consoleA vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to...CVE-2026-58073Public exploit9.5 Critical
- veeam service provider consoleA vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management...CVE-2026-580729.0 Critical
- veeam service provider consoleA vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access...CVE-2026-580718.2 High
- veeam service provider consoleA vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust...CVE-2026-580678.7 High
- veeam service provider consoleImproper handling of the returnUrl parameter in the Forgot Password function of Veeam Service...CVE-2026-646355.3 Medium
- veeam service provider consoleThis vulnerability in Veeam Service Provider Console allows for remote code execution.CVE-2026-329989.4 Critical
- veeam service provider consoleFrom the VSPC management agent machine, under condition that the management agent is authorized...CVE-2024-42448Public exploitEPSS 20.4%9.9 Critical
- veeam service provider consoleA vulnerability in Veeam Service Provider Console has been identified, which allows to perform...CVE-2024-452066.5 Medium
- veeam service provider consoleFrom the VSPC management agent machine, under condition that the management agent is authorized...CVE-2024-424497.1 High
- veeam service provider consoleA code injection vulnerability that allows a low-privileged user with REST API access granted to...CVE-2024-397158.5 High
- veeam service provider consoleA code injection vulnerability that permits a low-privileged user to upload arbitrary files to...CVE-2024-397149.9 Critical
- veeam service provider consoleA code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC...CVE-2024-386518.5 High
- veeam service provider consoleAn authentication bypass vulnerability can allow a low privileged attacker to access the NTLM...CVE-2024-386509.9 Critical
- veeam service provider consoleDue to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server...CVE-2024-292129.9 Critical