www.veeam.com Critical Veeam ONE Vulnerability Allows SMB Authentication Coercion
Article Content
- •CVE-2026-65641 allows unauthenticated SMB authentication coercion.
- •The vulnerability has a critical CVSS score of 9.3.
- •Veeam has released patches to mitigate the vulnerability.
A critical vulnerability in Veeam ONE, tracked as CVE-2026-65641, has been disclosed, allowing unauthenticated network attackers to coerce SMB authentication from the service account running the affected service. This vulnerability has been assigned a CVSS v4.0 score of 9.3, indicating its high severity. Veeam released security updates to address this issue, which was reported through HackerOne. Organizations using Veeam ONE are urged to apply the necessary patches to mitigate potential exploitation. The vulnerability was published in the knowledge base on August 26, 2026, and is currently being monitored for any signs of active exploitation. Failure to address this vulnerability could lead to unauthorized access and potential data breaches.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-65641 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…