CVE-2026-64633CWE-94code-injection

CVE-2026-64633

published August 4, 2026

CVSS
10.0
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

A vulnerability allowing remote unauthenticated code execution on the agent host.

The record
Technical detail
CVSS
10.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00604 · 48.3th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-08-04T21:16Z
References (1)
https://www.veeam.com/kb4892 · [email protected]
EPSS history
Timeline
  • 04 AUG 15:56Z
    A vulnerability allowing remote unauthenticated code execution on the agent host
    cvelistv5