Question 1

What is CVE-2026-106078 — CVE-2026-106078?

Accepted Answer

A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.

Question 2

What is the authoritative source for CVE-2026-106078?

Accepted Answer

CVE-2026-106078 (CVE-2026-106078) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-106078CVE-2026-106078

Description

Scoring