VulnSocial

CVE-2026-107239

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-23

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-30: 210-30
Referenced assets1 URL
By indicator
Full discourse2 posts
  • ♫Why♥Not♪@Python_s_

    #NØØT_Security_Alerts 🚨 #ALERT — Remote Code Execution via Veeam Virtualization Extensions Group October 29, 2026 PRODUCT: Veeam Management Pack for Microsoft System Center. CVE: CVE-2026-107239 SEVERITY: HIGH — CVSS 8.8 (v4.0). AFFECTED: Version 9.1 and earlier version 9 builds, including the Veeam Backup & Replication 13 compatibility patch. IMPACT: A member of the Veeam Virtualization Extensions Users group may remotely execute arbitrary code on servers hosting the Veeam Management Pack Collector service. ATTACK CONDITIONS: Membership in the specified group is required; the vendor’s CVSS vector also identifies passive user interaction. EXPLOITATION STATUS: Vulnerability verified during Veeam’s internal testing. Active exploitation has not been independently confirmed. FORENSIC TRIAGE: Audit group membership, Collector service activity and unexpected process execution. URGENT ACTION: Upgrade to Veeam Management Pack 13.1 (build 13.1.0.334). Review privileged group membership and restrict service connectivity. SOURCE: https://www.veeam.com/kb4961 CONFIDENCE: HIGH — First-party October 29 security disclosure. #Veeam #RCE #AccessControl #ServerSecurity #CyberSecurity

    0000022
    231 followersView on X
  • ♫Why♥Not♪@Python_s_

    #NØØT_Security_Alerts 🚨 #ALERT — Remote Code Execution via Veeam Virtualization Extensions Group October 29, 2026 PRODUCT: Veeam Management Pack for Microsoft System Center. CVE: CVE-2026-107239 SEVERITY: HIGH — CVSS 8.8 (v4.0). AFFECTED: Version 9.1 and earlier version 9 builds, including the Veeam Backup & Replication 13 compatibility patch. IMPACT: A member of the Veeam Virtualization Extensions Users group may remotely execute arbitrary code on servers hosting the Veeam Management Pack Collector service. ATTACK CONDITIONS: Membership in the specified group is required; the vendor’s CVSS vector also identifies passive user interaction. EXPLOITATION STATUS: Vulnerability verified during Veeam’s internal testing. Active exploitation has not been independently confirmed. FORENSIC TRIAGE: Audit group membership, Collector service activity and unexpected process execution. URGENT ACTION: Upgrade to Veeam Management Pack 13.1 (build 13.1.0.334). Review privileged group membership and restrict service connectivity. SOURCE: https://www.veeam.com/kb4961 CONFIDENCE: HIGH — First-party October 29 security disclosure. #Veeam #RCE #AccessControl #ServerSecurity #CyberSecurity

    0000021
    231 followersView on X

Explore more

Back to dashboard