Description
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Veeam | Management Pack for Microsoft System Center | 9.0 – < 13.1.0.334 | 13.1.0.334 |
Advisories 1
- WID-SEC-2026-4249 Veeam Management Pack for System Center: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Oct 29, 2026