How severe is CVE-2007-5126?

CVE-2007-5126 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2007-5126 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-5126?

CVE-2007-5126 affects Symantec Veritas Backup Exec. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2007-5126?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2007-5126 published?

CVE-2007-5126 was published on 2007-09-27 and last updated on 2026-06-16.

CVE-2007-5126

CVE-2007-5126 is a critical-severity vulnerability in Symantec Veritas Backup Exec with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 2% (72nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Symantec Veritas Backup Exec
Published: 2007-09-27
Last modified: 2026-06-16

Description

Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.

Frequently asked questions

What is CVE-2007-5126?: Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable advisories. A CVE has been assigned for tracking purposes, but duplicates with other CVEs are difficult to determine.
How severe is CVE-2007-5126?: CVE-2007-5126 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2007-5126 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-5126?: CVE-2007-5126 affects Symantec Veritas Backup Exec. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2007-5126?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2007-5126 published?: CVE-2007-5126 was published on 2007-09-27 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:symantec:veritas_backup_exec:11d:*:windows_servers:*:*:*:*:*

More vulnerabilities in Symantec Veritas Backup Exec

CVE-2009-3027 — Critical (CVSS 10.0): VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas…
CVE-2007-3509 — High (CVSS 7.5): Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows…

All CVEs affecting Symantec Veritas Backup Exec →