Low-Privileged User Reads Report Data Beyond Shared Link Scope
CVE-2026-64630 Published on August 4, 2026

A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

NVD

Weakness Type

What is an AuthZ Vulnerability?

The software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

CVE-2026-64630 has been classified to as an AuthZ vulnerability or weakness.


Products Associated with CVE-2026-64630

Want to know whenever a new CVE is published for Veeam One? stack.watch will email you.

 

Affected Versions

Veeam ONE: