CVE-2026-107238
CVE-2026-107238 is covered by the Veeam KB4961 security bulletin. Not in the CISA KEV catalog. High advisory severity. 1 advisory from Veeam.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Get an email when Veeam publishes the next one.
VulniPulse checks Veeam's security advisories around the clock and emails you new ones with the severity, the fixed version and the vendor's link. First month free, then US$15/month; we email you before the first charge.
CVE-2026-107238 key facts
- CISA KEV
- Not listed (catalog checked )
- Highest advisory severity
- High
- Vendor advisories
- 1 from Veeam
- VulniPulse record
- Published · Updated
Is CVE-2026-107238 exploited?
No exploitation is reported in the sources VulniPulse tracks: CVE-2026-107238 is not in the CISA KEV catalog (checked ) and no tracked advisory for it reports exploitation. That is not proof the vulnerability cannot be exploited.
How do I fix CVE-2026-107238?
This CVE is tracked through a multi-CVE bulletin, so its fixed releases may differ from the bulletin-wide values below. Check the vendor source.
Vendor advisory comparison
Veeam
1 advisory- Advisory severityHigh8.8
High [CVE-2023-22793 +2] Vulnerabilities Resolved in Veeam Management Pack for Microsoft System Center 13.1
KB4961Source published
This bulletin covers 3 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
Vulnerabilities Resolved in Veeam Management Pack for Microsoft System Center 13.1 KB ID: 4961 Product: Published: 2026-10-29 Last Modified: Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program (VDP) for all Veeam products and perform extensive internal code audits. When a vulnerability is identified, our team promptly develops a patch to address and mitigate the risk. In line with our dedication to transparency, we publicly disclose the vulnerability and provide detailed mitigation information. This approach ensures that all potentially affected customers can quickly implement the necessary measures to safeguard their systems. It’s important to…
- Related products — impact not confirmed
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- 13.1
- 13.1.0.334
- Mitigation guidance
- This vulnerability was fixed starting in the following build:
- Veeam Management Pack for Microsoft System Center 13.1 (build 13.1.0.334)
More Veeam advisories
- CVE-2025-64394Oct 27, 2026Vulnerabilities Resolved in Veeam Backup for Microsoft 365 8.6
- CVE-2026-105477Oct 27, 2026Release Information for Veeam Backup & Replication 13 and Updates
- KB4857Oct 27, 2026List of Security Fixes and Improvements in Veeam Recovery Orchestrator
- CVE-2026-105477Oct 27, 2026Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2
- CVE-2026-107671Oct 27, 2026Vulnerabilities Resolved in Veeam ONE 13.1 Patch 1
- CVE-2026-111943Oct 22, 2026Mitigating Impact of Compromised eMudhra Intermediate CA Certificates on Veeam Kasten
Follow CVE-2026-107238 in the free weekly digest
Every Monday: whether it was added to CISA KEV, reported exploited, got a fix or changed severity, plus the week's critical and high advisories.
Browse the latest tracked CVEs or the CVEs listed in CISA KEV.
Android app · Google Play
Monitor future Veeam CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.