Backup-Infrastructure

vulnerabilities 2026-08-28
Critical Veeam ONE Flaw Lets Unauthenticated Attackers Coerce SMB Auth From the Service Account
CVE-2026-65641 (CVSS 9.3) lets an unauthenticated network attacker force Veeam ONE's service account into an SMB authentication attempt, exposing Net-NTLM material for relay or offline cracking.
authentication-bypass network-appliance backup-infrastructure windows credential-theft

Critical Veeam ONE Flaw Lets Unauthenticated Attackers Coerce SMB Auth From the Service Account