CVE-2026-108142
Received Received - Intake

Unauthenticated Authorization Bypass in CDP Coordinator Service

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: HackerOne

Description
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-10-27
AI Q&A
2026-10-27
EPSS Evaluated
N/A
NVD
CVE-2026-108142
EUVD
EUVD-2026-111121

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Veeam Backup and Replication 13.0
Veeam Backup and Replication 13.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-636 When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an unauthenticated attacker to bypass authorization on the CDP Coordinator Service, potentially gaining unauthorized access to sensitive functions or data.

Impact Analysis

An attacker could exploit this to gain unauthorized access to systems, steal data, or perform actions without proper authentication, leading to data breaches or system compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access controls.

Mitigation Strategies

Apply the latest security patches from Veeam for Backup and Replication. Ensure the CDP Coordinator Service is updated to the fixed version. Restrict network access to the CDP Coordinator Service ports and monitor for unauthorized access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108142. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart