—

CVE-2026-58074

veeam · one

CVE-2026-58074: A vulnerability allowing a high-privileged user to execute arbitrary code on the server.

Description

A vulnerability allowing a high-privileged user to execute arbitrary code on the server.

Affected Products

Vendor	Product	Versions
veeam	one	0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
veeam	one	cert_advisory	90%

References

https://www.veeam.com/kb4892

Related News (4 articles)

Tier D

Heise Security19d ago

Veeam One und Service Provider Console für Schadcode-Attacken anfällig

→ No new info (linked only)

Tier B

BSI Advisories20d ago

[NEU] [hoch] Veeam ONE: Mehrere Schwachstellen

→ No new info (linked only)

Tier B

CERT-FR20d ago

Multiples vulnérabilités dans les produits Veeam (05 août 2026)

→ No new info (linked only)

Tier C

VulDB21d ago

CVE-2026-58074 | Veeam ONE up to 13.0.2 privileges management

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

CWECWE-94

PublishedAug 4, 2026

Trending Score5

Source articles4

Independent4

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

NONECVE-2026-58073

CVE-2026-58073: A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent an

Trending: 8

NONECVE-2026-64633

CVE-2026-64633: A vulnerability allowing remote unauthenticated code execution on the agent host.

Trending: 7

NONECVE-2026-58072

CVE-2026-58072: A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead

Trending: 7

NONECVE-2026-58075

CVE-2026-58075: A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leverag

Trending: 6

NONECVE-2026-58067

CVE-2026-58067: A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause

Trending: 6

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 4, 2026

Discovered by ZDM

Aug 4, 2026