CVE-2026-106077

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

CVSS 4.0

8.3CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:N

CWE

CWE-863

Published

2026-10-27

Modified

2026-10-27

Record from

the CVE List, synced 2026-10-27

Affected

• veeam:backup for microsoft 365

References

• https://www.veeam.com/kb4957

Check your stackJSON