CVE-2026-64630: Medium severity vulnerability

Published Aug 4, 2026

Updated

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

Event History

Aug 4, 2026

CVE Published

via MITRE·03:56 PM

Data Sourced

via MITRE·03:56 PM

DescriptionWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

The severity of CVE-2026-64630 is classified as medium with a CVSS score of 5.3.

CVE-2026-64630 allows a low-privileged user to retrieve report data outside the scope of a shared report link.

To fix CVE-2026-64630, ensure that appropriate access controls are implemented for report data.

As of now, there is no public information indicating that CVE-2026-64630 is actively being exploited.

CVE-2026-64630 affects systems using specific versions of Veeam that allow shared report links.