CVE-2026-108142 A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
CriticalCVSS 9.1
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Veeam Backup and Replication | >= 13.0, < 13.0.3 | 13.0.3 |
| Veeam Backup and Replication | >= 13.1, < 13.1.2 | 13.1.2 |