Veeam security advisory (AV26-513) – Update 1

Reported by Canadian Centre for Cyber Security

Summary by Cyber Security News21 Sep 2026, 21:24 CEST

About this summary. This is a short, independently written summary of an article first published by Canadian Centre for Cyber Security. Cyber Security News did not report or verify the underlying story. Read the original: https://cyber.gc.ca/en/alerts-advisories/veeam-security-advisory-av26-513

Serial number: AV26-513 Date: May 27, 2026 Updated: September 21, 2026 On May 27, 2026, Veeam published security advisories to address vulnerabilities in the following products: Veeam Backup & Replication – 13 versions prior to 13.0.2.29 Veeam ONE – versions prior to 13.0.2.6723 Veeam Service Provider Console – 9.2 versions prior to 9.2.1.33875 Update 1 Open-source reporting indicates that CVE-2026-32996 is being exploited in the wild.

Read the full article at Canadian Centre for Cyber Security →

Source attribution: headline and facts are from Canadian Centre for Cyber Security (cyber.gc.ca). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Meta Muse AI app flaw lets local malware redirect dictation traffic

Re: Emacs arbitrary code execution: incomplete fix for CVE-2024-53920

MISP security advisory (AV26-946)

WordPress Click2Shell flaw lets hackers execute PHP on the server

MongoDB Security Advisory (AV26-945)

CVE-2026-86473: Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry