Veeam security advisory (AV26-513) – Update 1

Serial number: AV26-513
Date: May 27, 2026
Updated: September 21, 2026

On May 27, 2026, Veeam published security advisories to address vulnerabilities in the following products:

• Veeam Backup & Replication – 13 versions prior to 13.0.2.29
• Veeam ONE – versions prior to 13.0.2.6723
• Veeam Service Provider Console – 9.2 versions prior to 9.2.1.33875

Update 1

Open-source reporting indicates that CVE-2026-32996 is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Vulnerabilities Resolved in Veeam Backup & Replication 13.0.2
• List of Security Fixes and Improvements in Veeam Service Provider Console
• List of Security Fixes and Improvements in Veeam ONE
• Vulnerability Resolved in Veeam Service Provider Console 9.2.1
• Veeam Knowledge Base