Auth bypass in Veeam Service Provider Console
CVE-2026-58071
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins.
Vulnerability class: Broken Authentication
Affected products
- Veeam Service Provider Console — versions 0