MEDIUM 6.9 NVD

CVE-2026-106078

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoi

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.

References

https://www.veeam.com/kb4957

Published: 2026-10-27 · Source: NVD · Feed updated: 2026-10-27

This medium severity vulnerability with a CVSS score of 6.9 was published on 2026-10-27 via NVD.

vulnfeed aggregates 18943 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.