Remote Code Execution Vulnerability in Veeam Management Pack for Microsoft System Center
CVE-2026-107238

8.7HIGH

Key Information:

Vendor

Veeam
Status
Management Pack For Microsoft System Center
Vendor
CVE Published:
29 October 2026

What is CVE-2026-107238?

A vulnerability exists in the Veeam Management Pack for Microsoft System Center that allows authenticated domain users to execute remote code with LocalSystem privileges on affected servers. This flaw can be exploited to gain unauthorized access and control over the system, posing significant risks to IT infrastructure and data integrity.

Affected Version(s)

Management Pack for Microsoft System Center 9.0 < 13.1.0.334

References

https://www.veeam.com/kb4961

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.