Ghostwire

CVE-2026-107238: A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account...

HIGH CVSS 0.0 EPSS 0.45%

Published: October 29, 2026 | Last Modified: October 29, 2026

Description

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.

Ghostwire Analysis — What This Means Practically

Exploitation Probability (EPSS): Low — 0.45% (39th percentile)

Low exploitation probability based on current threat landscape data. Standard patching timeline is appropriate.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References