Skip to content
OpenAdvisories
High · 8.7 CVE-2026-107238 EUVD-2026-113416GHSA-hmrg-rm9g-4vfr

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running …

Published Oct 29, 2026 · Updated Oct 30, 2026 · Assigned by hackerone

Description

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.

Affected products

VendorProductAffectedFixed
Veeam Management Pack for Microsoft System Center 9.0 – < 13.1.0.334 13.1.0.334

Advisories 1

References