CVE-2026-107238: High severity vulnerability
Published Oct 29, 2026
·Updated
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Event History
Oct 29, 2026
CVE Published
via MITRE·10:55 PM
Data Sourced
via MITRE·10:55 PM
DescriptionWeakness
Data Sourced
via NVD·11:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker needs an authenticated domain user account. The vulnerability is remotely exploitable over the network and is rated as requiring low privileges, low attack complexity, and no user interaction.
2
Which systems should be prioritized for investigation?
Prioritize servers running the Veeam Management Pack for Microsoft System Center Collector service, particularly where domain users can authenticate to the environment. Successful exploitation can result in code execution as LocalSystem on those servers.