CVE-2026-107239: High severity vulnerability
A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires membership in the Veeam Virtualization Extensions Users group. The vulnerable target is a server running the Veeam Management Pack for Microsoft System Center Collector service.
What level of access can exploitation provide?
A qualifying group member can achieve remote code execution on the affected Collector service server. The reported impacts include high effects on confidentiality, integrity, and availability.
Does exploitation require user interaction or other conditions?
The vector is network-accessible and rated low complexity, but exploitation requires both low privileges and user interaction. The supplied data does not specify what interaction is required or whether default configurations are affected.