Medium · 5.3 CVE-2026-64630 EUVD-2026-52759GHSA-685g-v9jx-pxqq

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

Published Aug 4, 2026 · Updated Aug 4, 2026 · Assigned by hackerone

Vendor: Veeam Product: One

Description

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

Affected products

Vendor	Product	Affected	Fixed
Veeam	ONE	≤ 13.0.2	—

Advisories 2

WID-SEC-2026-2656 Veeam ONE: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 26, 2026
NCSC-2026-0283 Kwetsbaarheden in Veeam ONE NCSC-NL (Netherlands) · Aug 11, 2026

References

https://www.veeam.com/kb4892