Warning: Multiple Critical Vulnerabilities in Veeam Service Provider Console, Patch Immediately!

Veeam published a security advisory for Service Provider Console (up to 9.2.1.33875 and earlier 9.x builds) disclosing four critical/high vulnerabilities—including authentication bypass (CVE-2026-58073), path traversal leading to arbitrary file write/RCE (CVE-2026-58072), memory exhaustion DoS (CVE-2026-58067), and unauthorized proxied API access (CVE-2026-58071); fixes are available in 9.3.0.35057 and organizations are urged to apply patches and increase monitoring due to the high impact on confidentiality, integrity, and availability despite no known active exploitation.