CVE-2025-64391
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locati
CVSS
—
Sin CVSS
EPSS
0.1%
p2
KEV
—
Exploit Today
0
0-100
Publicado: 7 oct 2026 · Última mod.: 19 oct 2026 · CWE-1386
0.1%EPSS · 30 días0.1%
2026-10-072026-10-23
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-568579.8 CRÍ41.5%
——12On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).14dCVE-2026-411166.3 MED1.6%
——0Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write.92d