PT-2026-132856

CVE-2026-107238

·

Published

2026-10-29

·

Updated

2026-10-29

Description by

CVSS 4.0
8.7
High
MetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-502: Deserialization of Untrusted Data
Related identifiers
CVE-2026-107238
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com