What is CVE-2026-58071?
This vulnerability in Veeam Service Provider Console allows an unauthenticated attacker to access the proxied appliance API as a Portal Administrator during a short window after an administrator session begins. Affected systems should be immediately updated with the official patch.
Azərbaycanca: Bu zəiflik Veeam Service Provider Console-da aşkarlanıb və autentifikasiya olunmamış hücumçuya administrator sessiyası başladıqdan sonra qısa müddət ərzində proksi edilən cihaz API-sinə Portal Administratoru kimi giriş imkanı verir. Təsirə məruz qalan sistemlərdə dərhal rəsmi yeniləmə tətbiq edilməlidir.
Related CVEs
link basis: same weakness class CWE-284; shared vendor: Veeam
FAQ2
Which product does CVE-2026-58071 affect?
This vulnerability was discovered in Veeam Service Provider Console.
Is authentication required to exploit CVE-2026-58071?
No, an unauthenticated attacker can access the proxied appliance API as a Portal Administrator during a short window after an administrator session begins.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.