Path Traversal in Veeam Service Provider Console

CVE-2026-58072

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (39.9th percentile) — read the EPSS interpretation.