What is GHSA-hmrg-rm9g-4vfr?

GHSA-hmrg-rm9g-4vfr is a security advisory published by GitHub Security Advisories with High severity. A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as...

Which CVE IDs does GHSA-hmrg-rm9g-4vfr cover?

GHSA-hmrg-rm9g-4vfr covers the following CVE IDs: CVE-2026-107238. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-hmrg-rm9g-4vfrHigh

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as...

Vendor

GitHub Security Advisories

Published

October 30, 2026

Last Modified

October 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-107238 →

📋 Description

A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-107238
https://www.veeam.com/kb4961
https://github.com/advisories/GHSA-hmrg-rm9g-4vfr