MediumVulnerability
CVE-2026-98432 Impact Statement
KB4966 · CVE-2026-98432 — CVE-2026-98432 Impact Statement
Veeam security advisories ↗
#veeam#cve-2026-98432#cve
Backup products
Vulnerabilities, release notes, and advisory bulletins for Veeam, Rubrik, Commvault, and peers.
74 changes, newest first
EmergencyVulnerability
Brotli critical vulnerability (SEC-12382)
SEC-12382 · Impact: Critical — A critical security vulnerability has been identified in the Brotli decompression library. It has been assigned [CVE-2026-111497](https://www.cve.org/CVERecord?id=CVE-2026-111497). Acronis security team is investigating which products and services may be affected by this vulnerability. As the investigation progresses, Acronis will update this advisory with information about affected…
Acronis security advisories ↗
#acronis#security#cve
EmergencyVulnerability
Vulnerabilities Resolved in Veeam Management Pack for Microsoft System Center 13.1
KB4961 · CVE-2026-107239, CVE-2026-107238 +1 · CVSS 9.3 · Impact: Critical — A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Microsoft System Center Collector service.
Veeam security advisories ↗
#veeam#cve-2026-107239#cve-2026-107238#cve
MediumVulnerability
Sensitive information disclosure due to insufficiently protected credentials (SEC-5613)
SEC-5613 · CVE-2026-87097 · CVSS 5.3 · Impact: Medium — Fixed in: Acronis Cyber Protect 17 42587.
Acronis security advisories ↗
#acronis#cve-2026-87097#cve
MediumVulnerability
Sensitive information disclosure due to missing SSL certificate verification affecting one component (SEC-10681)
SEC-10681 · CVE-2026-87880 · CVSS 6.8 · Impact: Medium — Fixed in: Acronis Cyber Protect 17 42587.
Acronis security advisories ↗
#acronis#cve-2026-87880#cve
HighVulnerability
Security update of third-party dependencies (SEC-11343)
SEC-11343 · Impact: High — Fixed in: Acronis Cyber Protect 17 42587.
Acronis security advisories ↗
#acronis#security
HighVulnerability
Local privilege escalation due to improper authentication (SEC-8648)
SEC-8648 · CVE-2025-30414 · CVSS 7.1 · Impact: High — Fixed in: Acronis Cyber Protect Cloud Agent 42569; Acronis Cyber Protect 17 42587.
Acronis security advisories ↗
#acronis#cve-2025-30414#cve
MediumVulnerability
Cross-site scripting (XSS) vulnerability due to improper input validation (SEC-8835)
SEC-8835 · CVE-2026-87099 · CVSS 5.7 · Impact: Medium — Fixed in: Acronis Cyber Protect 17 42587.
Acronis security advisories ↗
#acronis#cve-2026-87099#cve
MediumVulnerability
Sensitive information disclosure due to improper token validation (SEC-10289)
SEC-10289 · CVE-2026-87879 · CVSS 5.9 · Impact: Medium — Fixed in: Acronis Cyber Protect 17 42587.
Acronis security advisories ↗
#acronis#cve-2026-87879#cve
HighVulnerability
Sensitive information disclosure and manipulation due to improper token validation (SEC-9814)
SEC-9814 · CVE-2026-87103 · CVSS 7.4 · Impact: High — Fixed in: Acronis Cyber Protect 17 42587.
Acronis security advisories ↗
#acronis#cve-2026-87103#cve
Showing 10 of 74 changes