Cleartext Credential Exposure Vulnerability in Veeam Backup and Replication

CVE-2026-58070

What is CVE-2026-58070?

This vulnerability allows sensitive guest OS processing credentials to be recorded in cleartext within a support log on the guest operating system. As a result, any user with read access to this log file can potentially recover privileged account credentials, leading to unauthorized access and privilege escalation. Security measures should be implemented to secure log files and minimize the risk of exposure.

References