CVE-2026-58070
Quick assessment
Affected
Veeam Backup and Replication
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
该漏洞会将以明文形式记录客户机（Guest OS）处理凭证的信息写入客户机上的支持日志中，使得拥有该日志读取权限的用户能够恢复出特权账户的凭证。
Possible ATT&CK Techniques 1 AI
T1082 · System Information Discovery
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-58070
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Veeam | Backup and Replication | 0 ~ 13.0.3 | - |
|
II. Public POCs for CVE-2026-58070
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-58070
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-58070 (1)
Same Patch Batch · Veeam · 2026-08-26 · 3 CVEs total
| CVE-2026-65641 | 9.3 CRITICAL | SMB：未认证攻击者迫使服务账户认证 |
| CVE-2026-64632 | 8.5 HIGH | Reporter服务NTLM凭据泄露漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-532
-
CVE-2026-21808
HCL BigFix Quantum Risk Analyzer is affected by logging sens -
CVE-2026-14948
Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnera -
CVE-2026-76375
Information Disclosure through Environment Data Logging in A -
CVE-2026-76374
Information Disclosure through Sensitive Data Logging in AD -
CVE-2020-37267
Renovate 19.180.0 before 23.25.1 Token Leakage via Logs
V. Comments for CVE-2026-58070
No comments yet