Veeam Issues Urgent Security Updates for ONE 13.1 After Critical Flaws Discovered

Veeam has released crucial security updates for its Veeam ONE 13.1 software, addressing a suite of vulnerabilities that could allow malicious actors to compromise systems. The patches target multiple security flaws, including those that could lead to remote code execution, unauthorized access to sensitive files, theft of database information, and privilege escalation within affected environments.

The most severe of these vulnerabilities, identified as CVE-2026-64633, has been assigned a critical severity rating, underscoring the significant risk it poses. Exploitation of such a flaw could grant attackers the ability to execute arbitrary code on the compromised system, effectively giving them full control and potentially paving the way for broader network intrusions.

Beyond the critical code execution vulnerability, the security update also addresses issues that could enable attackers to gain unauthorized access to sensitive files stored on the system. This type of access could expose confidential data or system configurations. Furthermore, other patched vulnerabilities could allow for the exfiltration of database data and unauthorized privilege escalation, enabling lower-privileged users to gain administrative control over the system.