KB4892: Vulnerabilities Resolved in Veeam ONE 13.1

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2026-64632A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account
• CVE-2026-58075A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally
• CVE-2026-64634A vulnerability allowing local privilege escalation to the Reporter service context
• CVE-2026-64633A vulnerability allowing remote unauthenticated code execution on the agent host
• CVE-2026-58074A vulnerability allowing a high-privileged user to execute arbitrary code on the server
• CVE-2026-64631A vulnerability allowing a low-privileged user to inject SQL and extract database contents
• CVE-2026-64630A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link

Source and provenance

Original title: KB4892: Vulnerabilities Resolved in Veeam ONE 13.1. Captured 26 Oct 2026, 17:44 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.