Veeam Backup and Replication vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Veeam Backup and Replication: 18 record(s), with affected versions and fixes.
CVE-2026-93026
Medium · 6.1
CWE-862 Oct 7, 2026
Missing Authorization in Veeam Backup and Replication
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.
CVE-2026-58069
High · 8.3
CWE-22 Oct 7, 2026
Path Traversal in Veeam Backup and Replication
This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.
CVE-2025-64393
Critical · 9.4
CWE-502 Oct 7, 2026
Deserialization of Untrusted Data in Veeam Backup and Replication
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
CVE-2026-58070
Medium · 6.8
CWE-532 Aug 26, 2026
Insertion of Sensitive Information into Log File in Veeam Backup and Replication
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials.
CVE-2026-56844
High · 8.4
CWE-22 Jul 21, 2026
Path Traversal in Veeam Backup and Replication
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system.
CVE-2026-44963
Critical · 9.4
CWE-502 Jun 9, 2026
Deserialization of Untrusted Data in Veeam Backup and Replication
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
CVE-2026-32997
High · 8.6
CWE-36 May 28, 2026
A vulnerability allowing an authenticated user with the Backup Administrator role to…
A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.
CVE-2026-32996
High · 7.3
CWE-532 May 28, 2026
Insertion of Sensitive Information into Log File in Veeam Backup and Replication
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
CVE-2026-21709
Medium · 6.7
CWE-77 Apr 17, 2026
Command Injection in Veeam Backup and Replication
A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.
CVE-2026-21708
Critical · 9.9
CWE-89 Mar 12, 2026
SQL Injection in Veeam Veeam Backup & Replication
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
CVE-2026-21672
High · 8.8
CWE-538 Mar 12, 2026
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup &…
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
CVE-2026-21670
Medium · 6.5
CWE-522 Mar 12, 2026
Insufficiently Protected Credentials in Veeam Veeam Backup & Replication
A vulnerability allowing a low-privileged user to extract saved SSH credentials.
CVE-2026-21669
Critical · 9.9
CWE-94 Mar 12, 2026
Code Injection in Veeam Veeam Backup & Replication
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
CVE-2026-21668
Medium · 6.5
CWE-862 Mar 12, 2026
Missing Authorization in Veeam Veeam Backup & Replication
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.
CVE-2026-21667
High · 8.8
CWE-284 Mar 12, 2026
Improper Access Control in Veeam Veeam Backup & Replication
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
CVE-2026-21666
High · 8.8
CWE-284 Mar 12, 2026
Improper Access Control in Veeam Veeam Backup & Replication
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
CVE-2025-48984
High · 8.8
CWE-94 Oct 30, 2025
Code Injection in Veeam Veeam Backup & Replication
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
CVE-2025-48983
Critical · 9.9
CWE-284 Oct 30, 2025
Improper Access Control in Veeam Veeam Backup & Replication
A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.