Critical · 9.3 CVE-2026-65641 EUVD-2026-66760GHSA-mffw-5w3v-pm66

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

Published Aug 26, 2026 · Updated Aug 27, 2026 · Assigned by hackerone

Vendor: Veeam Product: One

Description

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

Affected products

Vendor	Product	Affected	Fixed
Veeam	One	< 13.1, < 13.0.2	13.1

Advisories 1

WID-SEC-2026-3008 Veeam ONE: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Aug 26, 2026

References

https://www.veeam.com/kb4905