{"vulnerability": "CVE-2026-58073", "sightings": [{"uuid": "d5cbc9d7-3bc2-4e99-8271-cbf9f5444e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmxoaj552z", "content": "CVE-2026-58073 - service provider console\nAn attacker can impersonate a managed agent in the Veeam Service Provider Console and steal its credentials without needing a login. This allows the attacker to access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#veeam #CVE #infosec", "creation_timestamp": "2026-08-04T18:22:04.086636Z"}, {"uuid": "7ea884f1-0352-4002-84a3-b185ff5acaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/CyberDispatch/2483", "content": "Veeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.", "creation_timestamp": "2026-08-30T00:00:37.768255Z"}, {"uuid": "c84c5164-d104-4369-b172-c725875377c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-per-prodotti-veeam-1", "content": "", "creation_timestamp": "2026-08-05T12:45:06.550526Z"}, {"uuid": "225d8e5b-db6c-49a0-8c95-f8a7d2b33dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqhfa242p", "content": "\ud83d\udd17 CVE : CVE-2026-58067, CVE-2026-58071, CVE-2026-58072, CVE-2026-58073, CVE-2026-58074, CVE-2026-58075, CVE-2026-64630, CVE-2026-64631, CVE-2026-64633, CVE-2026-64634", "creation_timestamp": "2026-08-05T13:05:27.662852Z"}, {"uuid": "f47bcd0c-2415-4b90-a714-489048296dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-05T15:00:06.206363Z"}, {"uuid": "3d9e6a3e-0b90-488a-abd6-c08214a3a567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msdtwlu54i23", "content": "CVE-2026-58073 \u00b7 trending #5\n\nCurrently trending CVE - Hype Score: 11 - A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-58073", "creation_timestamp": "2026-08-05T15:32:15.759528Z"}, {"uuid": "a46caf9c-3756-4734-bb72-d2d3928c0532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/thehackernews/9717", "content": "\ud83d\udea8 Veeam, Terraform MCP, and Django patched 11 flaws exposing credentials, crossing tenant boundaries, and enabling file writes.\n\nVeeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.\n\nHashiCorp patched CVE-2026-16498 and CVE-2026-16496, which can break tenant isolation in Terraform MCP Server, plus SSRF flaw CVE-2026-14869.\n\nDjango fixed CVE-2026-15307, a GeoDjango flaw that can write files and, on some setups, lead to code execution.\n\nSee what needs patching:  https://thehackernews.com/2026/08/veeam-terraform-mcp-django-patch.html", "creation_timestamp": "2026-08-06T00:00:34.543157Z"}, {"uuid": "f1224e43-1b86-4237-9e2d-b380658d138d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://t.me/CyberDispatch/2483", "content": "Veeam fixed CVE-2026-58073, which can expose managed-agent credentials without authentication, and CVE-2026-58072, a file-write flaw that can lead to RCE.", "creation_timestamp": "2026-08-29T20:00:06.471530Z"}, {"uuid": "3fda089d-9bcb-4196-b64a-193613808de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-27T12:00:10.096507Z"}, {"uuid": "da9f2710-b388-4706-aded-8a9d47662727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-28T00:00:52.782283Z"}, {"uuid": "61686af8-f54b-421a-9377-4b323d3758c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "published-proof-of-concept", "source": "Telegram/SjZ5hMszdpPQGw23TUkEXQRPDwQLdSAayNXrg7MMYe68R1M", "content": "", "creation_timestamp": "2026-08-27T00:00:07.283043Z"}, {"uuid": "2547c9a3-e528-44dc-a342-d5f95219b6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "published-proof-of-concept", "source": "Telegram/qhr7w023-vn7u1_ejg3FfnGZ1vCO9Tv-EvHPiDFbLb3J-JQ", "content": "", "creation_timestamp": "2026-08-29T00:00:16.485231Z"}, {"uuid": "d7b0efc0-b484-4158-9586-e3f8bce25ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58073", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqjlsxzmc2b", "content": "Veeam\u306e\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u5411\u3051\u7ba1\u7406\u30c4\u30fc\u30eb\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u306a\u3069\u3092\u5c55\u958b\u3059\u308bVeeam Software\u304c\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0\u5411\u3051\u306b\u63d0\u4f9b\u3057\u3066\u3044\u308b\u7ba1\u7406\u30c4\u30fc\u30eb\u300cVeeam Service Provider Console\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u91cd\u8981\u5ea6\u304c4\u6bb5\u968e\u4e2d\u3082\u3063\u3068\u3082\u9ad8\u3044\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u306f\u300cCVE-2026-58073\u300d\u300cCVE-2026-58072\u300d\u306e2\u4ef6\u3002\u3044\u305a\u308c\u3082\u30d0\u30b0\u30d0\u30a6\u30f3\u30c6\u30a3\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u901a\u3058\u3066\u5831\u544a\u3092\u53d7\u3051\u305f\u3068\u3044\u3046\u3002\n\n\u300cCVE-2026-58073\u300d\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c...", "creation_timestamp": "2026-09-05T03:22:04.887648Z"}]}