CVE-2026-58072CWE-22path-traversal

CVE-2026-58072

published August 4, 2026

CVSS
9.0
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.

The record
Technical detail
CVSS
9.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00533 · 44.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-04T21:16Z
References (1)
https://www.veeam.com/kb4893 · [email protected]
EPSS history
Timeline
  • 04 AUG 15:56Z
    A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution
    cvelistv5