Issue Details

CVE-2026-65641 A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. Severity: CriticalCVSS v4.0 Score: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:LSource: Reported through HackerOne. Affected Product Veeam ONE 13.1.0.7034 and all earlier version 13 builds.Note: Older versions (e.g., 12.x) are not affected. Solution This vulnerability was fixed starting in the following builds: Veeam ONE 13.1 Patch 0 (build 13.1.0.7233) Veeam ONE 13.0.2 Patch 1 (build 13.0.2.7159)