Live › vulnerability › CVE-2026-107239
A member of the Veeam Virtualization Extensions Users group can run arbitrary code on servers running the Veeam Management Pack for Microsoft System Center Collector service. The sources give a CVSS score of 8.8 and do not say whether a fix is available.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 23:27 UTC. All times on this page are UTC.
Teams that run Veeam Management Pack for Microsoft System Center 9.x with the Collector service in System Center Operations Manager. A member of the Veeam Virtualization Extensions Users group can run code remotely on the Collector servers (CVSS v4 8.8). Teams without this product, or already on 13.1.0.334, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Veeam Management Pack for Microsoft System Center | vendor | <= 9.1 (all 9.x builds) | 13.1.0.334 |
9.1.0.310713.1.0.33413.1.0.334)9.1.0.3107)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service.
This page as .md · .json · in your agent: get_signal("CVE-2026-107239")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.