CVE-2026-107671 is a vulnerability in Veeam One
Published on October 27, 2026
A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.
Weakness Type
Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
Products Associated with CVE-2026-107671
Want to know whenever a new CVE is published for Veeam One? stack.watch will email you.
Affected Versions
Veeam ONE:- Version 13.1, <= 13.1.0.7233 is affected.