Auth bypass in Veeam One

CVE-2026-64630

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

Vulnerability class: Broken Access Control

EPSS: 0.002 (14.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References