Issue Details

CVE-2026-64633 A vulnerability allowing remote unauthenticated code execution on the agent host. Severity: CriticalCVSS v4.0 Score: 10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:HSource: Reported through HackerOne. Affected Product Veeam ONE 13.0.2.6723 and all earlier version 13 builds.Note: Older versions (e.g., 12.x) are not affected. Solution This vulnerability was fixed starting in the following builds: Veeam ONE 13.1 (build 13.1.0.7034) Veeam ONE 13.0.2 Patch 1 (build 13.0.2.7159)