Local Privilege Escalation in Veeam Software's Reporter Service
CVE-2026-64634

8.4HIGH

Key Information:

Vendor

Veeam
Status
One
Vendor
CVE Published:
4 August 2026

What is CVE-2026-64634?

This vulnerability allows an attacker to escalate their privileges within the Veeam Reporter Service context. When exploited, it can provide unauthorized access to sensitive functionalities and data, potentially compromising the integrity of the system. Addressing this vulnerability is crucial to maintaining the security and stable operation of Veeam environments.

Affected Version(s)

ONE 0 <= 13.0.2

References

https://www.veeam.com/kb4892

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.