CVE-2026-58072
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Veeam | Service Provider Console | < 9.3 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-58072
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Veeam | Service Provider Console | 0 ~ 9.3 | - |
II. Public POCs for CVE-2026-58072
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-58072
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-58072 (1)
Same Patch Batch · Veeam · 2026-08-04 · 10 CVEs total
| CVE-2026-64633 | 10.0 CRITICAL | Agent主机远程未授权代码执行漏洞 |
| CVE-2026-58073 | 9.5 CRITICAL | Veeam Service Provider Console身份伪造漏洞 |
| CVE-2026-58075 | 8.7 HIGH | CVE-202X-XXXX：Linux软件本地文件读取致特权升级 |
| CVE-2026-58067 | 8.7 HIGH | Veeam Service Provider Console 资源管理错误漏洞 |
| CVE-2026-58074 | 8.6 HIGH | 某软件高权限用户远程代码执行漏洞 |
| CVE-2026-64631 | 8.6 HIGH | Veeam ONE SQL注入漏洞 |
| CVE-2026-64634 | 8.4 HIGH | Reporter服务本地权限提升漏洞 |
| CVE-2026-58071 | 8.2 HIGH | Veeam Service Provider Console 授权问题漏洞 |
| CVE-2026-64630 | 5.3 MEDIUM | Veeam ONE 授权问题漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-22
- CVE-2026-19038
MonomythDevelopment la-forge-mcp screenshot_element Tool ind - CVE-2026-18991
nanocoai NanoClaw send_file core.ts path traversal - CVE-2026-71313
rclone: Local Encoding Path Traversal - CVE-2026-18959
yushine InnoShop Files Endpoint panel-api.php destroyFiles p - CVE-2026-71309
rclone: Incomplete path validation allows backend root escap
V. Comments for CVE-2026-58072
No comments yet