File Exposure Vulnerability in Veeam Backup & Replication by Veeam
CVE-2026-58069

8.3HIGH

Key Information:

Vendor

Veeam
Status
Backup And Replication
Vendor
CVE Published:
7 October 2026

What is CVE-2026-58069?

A vulnerability exists in Veeam Backup & Replication that permits authenticated Cloud Connect tenants to access arbitrary files on the host machinery of the service provider. This exposure can lead to unauthorized access of sensitive data, making it critical for service providers and tenants to ensure proper access controls and upgrade to secure versions as recommended.

Affected Version(s)

Backup and Replication 12 <= 12.3.2

Backup and Replication 13 <= 13.0.3

References

https://www.veeam.com/kb4902

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.