PostgreSQL CVE-2026-21708
CRITICALCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Lifecycle Timeline
2DescriptionNVD
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
AnalysisAI
Veeam Backup & Replication allows a user with the Backup Viewer role (read-only) to escalate to remote code execution as the postgres database user. A read-only role achieving RCE represents a severe privilege escalation with scope change.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all systems running vulnerable Backup Viewer versions and isolate them from production networks if possible; disable remote access to Backup Viewer if not operationally required. Within 7 days: Implement network segmentation to restrict Backup Viewer access to authorized administrators only; enable comprehensive logging and monitoring for all Backup Viewer activities; conduct forensic review of backup viewer logs for signs of compromise. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today