High WID-SEC-2026-4249 3 CVEs

Veeam Management Pack for System Center: Mehrere Schwachstellen ermöglichen Codeausführung

Published Oct 29, 2026 · Updated Oct 29, 2026 · de-DE

Vendor: Veeam Product: Management Pack for System Center Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Veeam Management Pack for System Center ausnutzen, um beliebigen Programmcode, möglicherweise mit Adminrechten, auszuführen.

Product

Veeam Management Pack for Microsoft System Center ist eine System Center-Erweiterung für die Verwaltung von VMware vSphere, Microsoft Hyper-V und Veeam Backup & Replication.

Vulnerabilities 3

Critical 9.3

CVE-2023-22793

A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veea…

Veeam Management Pack for Microsoft System Center

Oct 29, 2026
High 8.8

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (…

Veeam Management Pack for Microsoft System Center

Oct 29, 2026
High 8.7

CVE-2026-107238

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account…

Veeam Management Pack for Microsoft System Center

Oct 29, 2026

Revision history

2026-10-29 #1
Initiale Fassung

References

Veeam Release Information vom 2026-10-29
https://www.veeam.com/kb4961
Veeam Release Information vom 2026-10-29
https://www.veeam.com/kb4949