Veeam, Terraform MCP, Django Patch Critical Flaws Including CVSS 10.0 Bug

Thu, 06 Aug 2026 13:03:19 +0000

Engineer — Plan: Critical-severity patches in three commonly deployed tools — the Veeam Service Provider Console unauthenticated credential leak (CVSS 9.5) and the Terraform MCP Server cross-tenant token reuse (CVSS 10.0) are high priority; no KEV listing or public PoC yet, but patch Veeam VSPC and Terraform MCP Server to the latest fixed releases within your next patch window.
SOC/IR — Skip
Leader — Skip

Iac-Security on CuraSec