CVE-2026-108142
Published on October 27, 2026
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
Weakness Type
What is a Failing Open Vulnerability?
When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions. By entering a less secure state, the product inherits the weaknesses associated with that state, making it easier to compromise. At the least, it causes administrators to have a false sense of security. This weakness typically occurs as a result of wanting to "fail functional" to minimize administration and support costs, instead of "failing safe."
CVE-2026-108142 has been classified to as a Failing Open vulnerability or weakness.
Affected Versions
Veeam Backup and Replication:- Version 13.0 and below 13.0.3 is affected.
- Version 13.1 and below 13.1.2 is affected.