CVE-2026-64635

CVSS Score & Metrics

Base Score

5.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N                                    

Vulnerability Description

Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated attacker to control the domain of the generated password reset link. When the targeted user clicks the link delivered by email, the reset code is transmitted to an attacker-controlled host, allowing the attacker to take over the account.

Vulnerability Details

Published Date

July 30, 2026

Last Modified

July 30, 2026

CWE ID

CWE-640

Source

NVD

Vendor

Veeam

Product

Service Provider Console

External References

https://www.veeam.com/kb4853

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment