Veeam Patches Critical Backup & Replication Authorization Bypass Vulnerability

Veeam has released fixes for a critical authorization bypass vulnerability in Veeam Backup & Replication that lets an attacker without login credentials bypass access checks on the CDP Coordinator Service, Cybersecurity News reports. Tracked as CVE-2026-108142 and rated CVSS 9.1, the flaw affects both Windows-based deployments and the Veeam Software Appliance.