CVE-2026-106077
Published on October 27, 2026

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.

NVD

Weakness Type

What is an AuthZ Vulnerability?

The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

CVE-2026-106077 has been classified to as an AuthZ vulnerability or weakness.


Affected Versions

Veeam Backup for Microsoft 365: