All vulnerabilities
CVE-2026-108142

Backup and Replication: A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

Veeam Backup and Replication
Open in ThreatlineRecord JSON
CVSS
9.1Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in13.0.3Also 13.1.2CVE List
Published27 Oct 2026Updated 27 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

Text from CVE List

Affected versions 2

  • Backup and Replicationaffected: 13.0 before 13.0.3CVE List
  • Backup and Replicationaffected: 13.1 before 13.1.2CVE List

References 1