CVE-2026-58072: Path Traversal

Published Aug 4, 2026

Updated

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.

Affected Software

1 affected component

Veeam Veeam Service Provider Console

Aug 4, 2026

CVE Published

via MITRE·03:56 PM

Data Sourced

via MITRE·03:56 PM

DescriptionWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

CVE-2026-58072 has a critical severity rating of 9 according to the CVSS score.

To fix CVE-2026-58072, apply the latest patches and updates provided by Veeam for the Veeam Service Provider Console.

CVE-2026-58072 can lead to arbitrary file writes on the management server, resulting in remote code execution.

CVE-2026-58072 affects the Veeam Service Provider Console.

CVE-2026-58072 is classified as a Path Traversal vulnerability.