SB20260825117 - Cleartext storage of sensitive information in Veeam Backup & Replication

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260825117

SB20260825117 - Cleartext storage of sensitive information in Veeam Backup & Replication

Published: August 25, 2026

Security Bulletin ID SB20260825117
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Cleartext storage of sensitive information (CVE-ID: CVE-2026-58070)

CWE-ID: CWE-312 - Cleartext Storage of Sensitive Information

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to cleartext storage of sensitive information in guest machine logs when performing application aware processing. A local user can read logged guest OS credentials to disclose sensitive information.

The issue affects guest OS credentials used for application aware processing and the credentials are recorded on the guest machine.


Remediation

Install update from vendor's website.

References