VulnerabilityPoC2 · 1 read

CVE-2026-32996

CVSS 4.0: 7.3 high
EPSS: <1%p6
Published: May 28, 2026 · May 28, 2026
Modified: Oct 26, 2026

Analyze CVE-2026-32996 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.

Weakness: CWE-532

Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

6 stories

Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)

Chinese-speaking threat actor exploited a vulnerability in unpatched ZyXEL switches (CVE-2026-7273) affecting 996 devices across multiple countries; the exploit was contained in June 2026 and is now part of a broader…

Help Net SecuritySep 22, 10:42 UTC · Sep 22, 2026Threat actorExploitedCVE-2026-7273 CVE-2026-3299610

Veeam security advisory (AV26-513) – Update 1

Canada's Cyber Centre warns CVE-2026-32996 is being exploited and urges Veeam updates.

Canadian Centre for Cyber SecuritySep 21, 19:24 UTC · Sep 21, 2026AdvisoryExploitedCVE-2026-329964 · 1 read

Veeam Agent Flaw Actively Exploited to Gain SYSTEM Privileges on Windows

Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM through Veeam Agent for Windows.

Cyber Security NewsSep 22, 12:55 UTC · Sep 22, 2026Exploit / PoCCVE-2026-329961 · 1 read

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI

The Hacker NewsJun 2, 03:39 UTC · Jun 2, 2026RansomwareExploitedCVE-2026-0257 CVE-2026-8732 CVE-2026-27771+311 · 1 read

Hackers Exploit Veeam Agent Vulnerability to Gain SYSTEM-Level Access on Windows

Public PoC for CVE-2026-32996 lets local users escalate to SYSTEM on vulnerable Veeam Agent for Windows.

GBHackersSep 22, 11:22 UTC · Sep 22, 2026Exploit / PoCCVE-2026-329961 · 1 read

Public PoC Exposes Critical Veeam Agent Privilege Escalation

Public PoC for CVE-2026-32996 lets low-privileged local users gain SYSTEM on Veeam Agent for Windows; patch to 13.0.2.29 or later.

Security AffairsSep 22, 10:13 UTC · Sep 22, 2026Exploit / PoCCVE-2026-329964 · 1 read