CVE-2026-108142EUVD-2026-111121
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 13.0.3, 13.1.2
- Public exploit
- None on Exploit-DB
Summary
An unauthenticated attacker can bypass authorization checks in the CDP Coordinator Service, a component of Cisco Discovery Protocol-related management software. Successful exploitation could allow the attacker to perform actions they are not permitted to perform on the affected service.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
Affected versions
- Veeam Backup and Replication
From 13.0 · fixed in 13.0.3; From 13.1 · fixed in 13.1.2