SQL Injection Vulnerability in Veeam Products
CVE-2026-64631

8.6HIGH

Key Information:

Vendor

Veeam
Status
One
Vendor
CVE Published:
4 August 2026

What is CVE-2026-64631?

This vulnerability permits an attacker with low privileges to execute SQL injection attacks, enabling the extraction of sensitive data from the database. By manipulating SQL queries, an unauthorized user can potentially gain access to confidential information, thereby compromising the integrity and confidentiality of the affected system.

Affected Version(s)

ONE 0 <= 13.0.2

References

https://www.veeam.com/kb4892

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.