CVE-2026-107239

{
  "etk_id": "ETK-2026-3023",
  "cve_id": "CVE-2026-107239",
  "display_id": "CVE-2026-107239",
  "ghsa_id": "GHSA-6jww-wg25-pfvv",
  "euvd_id": "EUVD-2026-113415",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Path traversal in Veeam Management Pack Collector service",
  "summary": "The Collector service in Veeam Management Pack for Microsoft System Center has a path-traversal vulnerability. A user in the Veeam Virtualization Extensions Users group may be able to run code remotely on systems hosting that service. The available evidence does not identify affected or corrected releases.",
  "mitigation": "Restrict membership in the Veeam Virtualization Extensions Users group to trusted administrators and limit network access to Collector service hosts. Monitor for and apply the vendor-provided update when a fixed release is identified.",
  "vendor": "Veeam",
  "product": "Management Pack for Microsoft System Center",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 9.0, < 13.1.0.334"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "13.1.0.334"
      ],
      "package_name": "Management Pack for Microsoft System Center",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 8.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 13.501157583333333,
  "t0_at": "2026-10-29T22:55:37.649000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-29T22:55:37.649000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T22:55:37.649000+00:00",
      "url": "https://github.com/advisories/GHSA-6jww-wg25-pfvv"
    }
  }
}