{"id":"CVE-2026-106078","published":"2026-10-27T17:16:56.793","lastModified":"2026-10-27T17:16:56.793","description":"A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://www.veeam.com/kb4957","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}