EUVD-2026-66762
GHSA-64r9-cr9x-2wp4
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local log read access requires at minimum a low-privilege guest OS foothold; only confidentiality is impacted via credential disclosure with no integrity or availability effect.
Primary rating from Vendor (hackerone).
CVSS VectorVendor: hackerone
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials.
AnalysisAI
Credential exposure in Veeam Backup & Replication occurs when guest OS processing operations write privileged account credentials to a support log file in cleartext, leaving them recoverable by any local user with read permissions on that log. Documented via HackerOne and Veeam KB4902, this CWE-532 information disclosure flaw affects all tracked versions per CPE data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing local presence on the guest OS with read permissions on the Veeam support log file (AV:L, PR:L per CVSS 4.0). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N) scores 6.8 Medium, reflecting a local attack vector requiring low-privilege access with no complexity or special conditions. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the Veeam vendor advisory at https://www.veeam.com/kb4902 for official patch or fix-version information, as the provided intelligence does not confirm an exact patched release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Backup And Replication
View allRemote code execution in Veeam Backup & Replication enables an authenticated domain user to execute arbitrary code on th
Arbitrary file write in Veeam Backup & Replication 13 (≤13.0.1) on Linux-based deployments allows an authenticated Backu
Local privilege escalation in the Veeam Updater component of the Veeam Software Appliance allows a high-privileged local
Local privilege escalation in Veeam Agent for Microsoft Windows enables a low-privileged authenticated user to escalate
Bypass of Windows Driver Signature Enforcement in Veeam Backup and Replication 12.x and Software Appliance 13.x allows l
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today