Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Veeam security patch release for CVE-2026-58073

Security Patch Release
First reported
Last updated
Happening score
H score 39
1 unique sources, 1 articles

Summary

Hide ▲

Veeam released Service Provider Console 9.3.0.35057 to fix four vulnerabilities in the multi-tenant backup management console. The most serious are CVE-2026-58073, an unauthenticated credential-theft flaw, and CVE-2026-58072, an arbitrary file-write issue that can lead to remote code execution. The fixes apply to VSPC 9.2.1.33875 and earlier version 9 builds, and operators are told to upgrade to 9.3.0.35057.

Related Happenings

Arista VeloCloud Orchestrator security update for CVE-2026-16812

Security Patch Release
H score55 First: 28.07.2026 01:49 Last: 28.07.2026 01:49 Sources 1

About this happening: Arista patched CVE-2026-16812, a maximum-severity 10.0 OS command injection flaw in on-premises VeloCloud Orchestrator (VCO), after confirming it is actively...

Open Happening

RabbitMQ maintainers security patch release for CVE-2026-57219

Security Patch Release
H score29 First: 14.07.2026 16:48 Last: 14.07.2026 16:48 Sources 1

About this happening: RabbitMQ maintainers released fixed versions for multiple supported release lines, closing two access-control flaws that could expose OAuth client secrets and cross-te...

Open Happening

Linux kernel stable maintainers security patch release for CVE-2026-53359

Security Patch Release
H score41 First: 06.07.2026 20:37 Last: 06.07.2026 20:37 Sources 1

About this happening: The Linux kernel shipped stable fixes for CVE-2026-53359, closing a KVM use-after-free on x86 hosts with nested virtualization. The fix reached 7.1.3, 6.18.3...

Open Happening

Veeam security patch release for CVE-2026-44963

Security Patch Release
H score79 First: 09.06.2026 17:27 Last: 09.06.2026 17:27 Sources 1

About this happening: Veeam released security updates for Veeam Backup & Replication to fix CVE-2026-44963, a critical flaw that could enable remote code execution on domain-joined ba...

Open Happening

Ivanti security patch release for CVE-2026-8043

Security Patch Release
H score25 First: 18.05.2026 13:54 Last: 18.05.2026 13:54 Sources 1

About this happening: Ivanti, Fortinet, SAP, Broadcom, and n8n released security fixes on 2026-05-18 for flaws that could enable authentication bypass, remote code execution, SQL...

Open Happening

Timeline

  1. 05.08.2026 17:27 2 articles · 2h ago

    Veeam releases Service Provider Console 9.3.0.35057 to fix four flaws

    Mitigation Patch Update

    Veeam released Service Provider Console 9.3.0.35057 on July 29 to fix four vulnerabilities in the multi-tenant backup management console, including CVE-2026-58073 and CVE-2026-58072. The build applies to VSPC 9.2.1.33875 and earlier version 9 builds.

    Show sources
    Open in new tab
  2. 05.08.2026 17:27 1 articles · 2h ago

    Veeam details four Service Provider Console vulnerabilities in build 9.3.0.35057

    Initial Disclosure

    A security bulletin published August 4 detailed four Service Provider Console vulnerabilities fixed in build 9.3.0.35057. CVE-2026-58073 is an unauthenticated flaw that can impersonate a managed agent and expose that agent's credentials, while CVE-2026-58072 is an arbitrary file-write issue on the management server that can lead to remote code execution; the bulletin also listed CVE-2026-58067 and CVE-2026-58071 and directed operators to upgrade to 9.3.0.35057.

    Show sources
    Open in new tab