{"id":"CVE-2026-106076","published":"2026-10-27T17:16:56.553","lastModified":"2026-10-27T17:16:56.553","description":"A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://www.veeam.com/kb4957","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}