Remote Code Execution Vulnerability in Veeam Management Pack for Microsoft System Center
CVE-2026-107239

8.8HIGH

Key Information:

Vendor

Veeam
Status
Management Pack For Microsoft System Center
Vendor
CVE Published:
29 October 2026

What is CVE-2026-107239?

A security vulnerability exists in the Veeam Management Pack for Microsoft System Center that enables members of the Veeam Virtualization Extensions Users group to execute arbitrary code on the servers that utilize the Collector service. This flaw can potentially lead to unauthorized operations and compromise system integrity, making it essential for users to apply patches and mitigate risks associated with this vulnerability.

Affected Version(s)

Management Pack for Microsoft System Center 9.0 < 13.1.0.334

References

https://www.veeam.com/kb4961

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.