CVE-2026-58075
Received Received - Intake

Path Traversal in Host System Allows File Read

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: HackerOne

Description
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-58075
EUVD
EUVD-2026-52756

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
veeam one to 13.1.0.7034 (exc)
veeam one 13.1.0.7034

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-58075 is a high-severity vulnerability in Veeam ONE versions 13.0.2.6723 and earlier. It allows an unauthenticated attacker to read arbitrary files from the host system. This flaw can be exploited to escalate privileges locally.

Detection Guidance

Check if your Veeam ONE version is 13.0.2.6723 or earlier. If so, the system is vulnerable. Upgrade to version 13.1.0.7034 or later to resolve the issue.

Impact Analysis

An attacker could access sensitive files on the system, potentially leading to unauthorized data exposure or privilege escalation. This may allow them to gain control over the affected system or extract confidential information.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA compliance requirements. Organizations may face legal penalties and reputational damage if such data breaches occur.

Mitigation Strategies

Immediately upgrade Veeam ONE to version 13.1.0.7034 or later. If upgrading is not possible, apply network-level mitigations such as restricting access to the Veeam ONE server.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58075. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart