Authorization Bypass Vulnerability in Veeam CDP Coordinator Service
CVE-2026-108142

9.1CRITICAL

Key Information:

Vendor

Veeam
Status
Backup And Replication
Vendor
CVE Published:
27 October 2026

What is CVE-2026-108142?

The Veeam CDP Coordinator Service has a security flaw that enables unauthenticated users to circumvent authorization protocols. This flaw could allow malicious actors to gain unauthorized access to sensitive functions within the service, posing a significant risk to data integrity and overall system security. Organizations utilizing affected versions of this service should prioritize implementing remediation strategies to protect their assets and mitigate potential exploitation.

Affected Version(s)

Backup and Replication 13.0 < 13.0.3

Backup and Replication 13.1 < 13.1.2

References

https://www.veeam.com/kb4948

CVSS V4

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.