Quick answers
- Is CVE-2026-107238 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-107238 being exploited in the wild.
- How severe is CVE-2026-107238?
- Informational severity, published 29 October 2026.
- Which products and versions are affected?
- Veeam Management Pack for Microsoft System Center 9.1 and all earlier version 9 builds.
- Is there a fix for CVE-2026-107238?
- Yes: fixed in Management Pack for Microsoft System Center 13.1 (build 13.1.0.334). Until then: Customers running version 9.x should upgrade to version 13.1.0.334, as no patch will be provided for the 9.x line. Version 9.x is end-of-life and unsupported.</anigation> <parameter name="timeline">[{"kind":"disclosed","at":"2026-10-29"}] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-107238 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-2026-107238?
- Check whether you run Veeam Management Pack for Microsoft System Center at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
How to fix
- Fixed in: Management Pack for Microsoft System Center 13.1 (build 13.1.0.334)
Customers running version 9.x should upgrade to version 13.1.0.334, as no patch will be provided for the 9.x line. Version 9.x is end-of-life and unsupported.</anigation> <parameter name="timeline">[{"kind":"disclosed","at":"2026-10-29"}]
Technical details
An authenticated domain user can exploit a vulnerability in the Collector service to achieve remote code execution with LocalSystem privileges. The attack requires network access and valid domain credentials but no user interaction. Exploitation grants full system-level access and integrity. The vulnerability is fixed in version 13.1.0.334; version 9.x is end-of-life with no patch available.
Affected products
- Veeam Management Pack for Microsoft System Center 9.1 and all earlier version 9 builds