Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD8.7 High

CVE-2026-107238

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft S

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Veeam Management Pack for Microsoft System Center

Default version status: unaffected

  • 9.0 to < 13.1.0.334affected

References