VulnSocial

CVE-2026-32998Disclosure

LOWCVSS 9.4 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

This vulnerability in Veeam Service Provider Console allows for remote code execution.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-233

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 3 mentions (2026-05-28); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-05-28: 3Mentions · 2026-06-10: 1Patch / Workaround · 2026-05-28: 2Technical Details · 2026-05-28: 305-2806-10
Signal classification2 categories
Disclosure
250.0%
Patch
250.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-283
Disclosure1Patch2
2026-06-101
Disclosure1
Full discourse4 posts
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨 Critical - Veeam Service Provider Console RCE Vulnerability (CVE-2026-32998) Veeam disclosed a critical remote code execution vulnerability affecting Veeam Service Provider Console 9.2.0.33215 and all earlier v9 builds. The issue is related to script execution within alarms. 👉 Affected: Veeam Service Provider Console v9 builds ≤ 9.2.0.33215 👉 Fix: Upgrade to Veeam Service Provider Console 9.2.1.33875 👉 Mitigation: Disable AlarmManagement_ScriptExecutionEnabled and restart the Veeam Management Portal Service

    Post summary

    Veeam disclosed a critical RCE in Service Provider Console versions up to 9.2.0.33215, recommending an upgrade and disabling script execution; no evidence of PoC, tool, or active exploitation.

    00010111
    196 followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos Veeam ❗ CVE-2026-32998 ❗ CVE-2026-32997 ❗ CVE-2026-32996 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-veeam-6/ https://t.co/fJb6CglTYZ

    Post summary

    The tweet announces three new CVEs affecting Veeam products and links to a source for additional information, but offers no technical, exploit, or mitigation details.

    0000068
    6.7K followersView on X
  • ADK Cyber@ADKCyber
    Disclosure

    New high-severity CVE-2026-32998 (CVSS 9.4) affects Veeam Service Provider Console with remote code execution risk. MSPs and organizations using Veeam should review exposure promptly. via NVD Recent High CVSS 1/3 #CyberSecurity #InfoSec #Vulnerability https://t.co/KZuvJAvqvu

    Post summary

    A new high‑severity CVE‑2026‑32998 affecting Veeam Service Provider Console has been disclosed with a CVSS score of 9.4 and a remote code execution risk; users should assess exposure promptly.

    0000046
    81 followersView on X
  • Autumn Good@autumn_good_35
    Patch

    これもサイレント修正ですかね。 🚨🚨🚨 『A vulnerability in Veeam Service Provider Console allows for remote code execution.』 CVE-2026-32998 KB4853: Vulnerability Resolved in Veeam Service Provider Console 9.2.1 https://www.veeam.com/kb4853

    Post summary

    The post announces that CVE-2026-32998, a remote code execution flaw in Veeam Service Provider Console, has been fixed in version 9.2.1, referencing the official Veeam KB advisory.

    00000353
    6.9K followersView on X

Explore more

Back to dashboard