CVE-2026-64635
CVE-2026-64635 key facts
- CISA KEV
- Not listed (catalogue checked )
- Highest advisory rating
- Critical
- Vendor advisories
- 2 from Veeam
- Listed by VulniPulse
Ratings, versions and fixes are quoted from the vendor advisories that cover only CVE-2026-64635; each belongs to its advisory, not to every product listed. How records are collected and checked.
Vendor advisories for CVE-2026-64635
Veeam
2 advisories- Advisory severityCritical9.4
Critical [CVE-2026-32998 +1] Vulnerability Resolved in Veeam Service Provider Console 9.2.1
KB4853Source published
This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
Vulnerability Resolved in Veeam Service Provider Console 9.2.1 KB ID: 4853 Product: Veeam Service Provider Console | 9 | 9.1 | 9.2 Published: 2026-05-27 Last Modified: 2026-07-28 All vulnerabilities documented in this article were resolved in Veeam Service Provider Console 9.2.1.33875. Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program (VDP) for all Veeam products and perform extensive internal code audits. When a vulnerability is identified, our team promptly develops a patch to address and mitigate the risk. In line with our dedication to transparency, we publicly disclose the vulnerability and provide detailed mitigation information. This…
- Related products — impact not confirmed
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- 9.2.0.33215
- 9.2.1.33875
- Source-reported fixed versions
- 9.2.1
- 9.2.0
- Mitigation guidance
- Upgrade to Veeam Service Provider Console 9.2.0.33215 or later, which contains the listed security fixes.
- Advisory severityUnrated
Advisory [CVE-2026-32998 +5] List of Security Fixes and Improvements in Veeam Service Provider Console
KB4856Source published
This bulletin covers 6 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
List of Security Fixes and Improvements in Veeam Service Provider Console KB ID: 4856 Product: Published: 2026-05-27 Last Modified: Purpose 9.3.0.35057 - @babel/runtime upgraded to version 7.29.7 - axios upgraded to version 1.16.1 - dompurify upgraded to version 3.4.11 - follow-redirects upgraded to version 1.16.0 - form-data upgraded to version 4.0.6 - happy-dom upgraded to version 20.9.0 - i18next-http-backend upgraded to version 4.0.0 - linkify-it upgraded to version 5.0.2 - lodash upgraded to version 4.18.1 - MailKit upgraded to version 4.16.0 - MimeKit upgraded to version 4.16.0 - OpenTelemetry. Api upgraded to version 1.16.0 - picomatch upgraded to version 4.0.4 - SkiaSharp upgraded to version 3.119.4 - System. Security. Cryptography. Xml upgraded to version 10.0.10 - uuid upgraded…
- Affected products in this advisory
- Service Provider Console
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- List of Security Fixes and Improvements in Veeam Service Provider Console KB ID: 4856 Product: Veeam Service Provider Console | 9.2 | 9.3 Published: 2026-05-27 Last Modified: 2026-08-04 Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Service Provider Console.
- This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases to help them make an informed decision on whether it is critical to upgrade from their current Veeam Service Provider Console version to a later one.
References
More Veeam advisories
CVE-2026-98432Nov 6, 2026Impact StatementCVE-2023-22793Oct 29, 2026Vulnerabilities Resolved in Veeam Management Pack for Microsoft System Center 13.1CVE-2025-64394Oct 27, 2026Vulnerabilities Resolved in Veeam Backup for Microsoft 365 8.6CVE-2026-105477Oct 27, 2026Release Information for Veeam Backup & Replication 13 and UpdatesKB4857Oct 27, 2026List of Security Fixes and Improvements in Veeam Recovery OrchestratorCVE-2026-105477Oct 27, 2026Vulnerabilities Resolved in Veeam Backup & Replication 13.1.2
Get an email when Veeam publishes the next one.
See Veeam's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future Veeam CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
