Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform…

Risk score
53/100
CVSS
8.8 v4.0
Published
29 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 8.8 high

References

Original description

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service.

Last activity 29 Oct 2026. Patch Forecast updates every hour.