Path Traversal in Veeam Service Provider Console

CVE-2026-58072

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.

Vulnerability class: Path Traversal (Directory Traversal)

Affected products

Weakness classification (CWE)

References