CVE-2026-1060769.0Critical
Veeam Backup for Microsoft 365 vulnerability
Veeam · Backup for Microsoft 365
Not in CISA KEV
0.4%probability of exploitation in the next 30 days
30th percentile
050100
Higher than 30% of scored CVEs
9.0CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 30 Oct.
- Veeam patches seven flaws, including critical remote code executionSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.