Vulnerabilidades do Veeam Backup and Replication
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Veeam Backup and Replication: 16 registro(s), com versões afetadas e correções.
CVE-2026-93026
Média · 6.1
CWE-862 07/10/2026
Missing Authorization em Veeam Backup and Replication
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.
CVE-2026-58069
Alta · 8.3
CWE-22 07/10/2026
Path Traversal em Veeam Backup and Replication
This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.
CVE-2025-64393
Crítica · 9.4
CWE-502 07/10/2026
Deserialization of Untrusted Data em Veeam Backup and Replication
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.
CVE-2026-44963
Crítica · 9.4
CWE-502 09/06/2026
Deserialization of Untrusted Data em Veeam Backup and Replication
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
CVE-2026-32997
Alta · 8.6
CWE-36 28/05/2026
A vulnerability allowing an authenticated user with the Backup Administrator role to…
A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.
CVE-2026-32996
Alta · 7.3
CWE-532 28/05/2026
Insertion of Sensitive Information into Log File em Veeam Backup and Replication
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
CVE-2026-21709
Média · 6.7
CWE-77 17/04/2026
Command Injection em Veeam Backup and Replication
A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.
CVE-2026-21708
Crítica · 9.9
CWE-89 12/03/2026
SQL Injection em Veeam Veeam Backup & Replication
A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.
CVE-2026-21672
Alta · 8.8
CWE-538 12/03/2026
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup &…
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
CVE-2026-21670
Média · 6.5
CWE-522 12/03/2026
Insufficiently Protected Credentials em Veeam Veeam Backup & Replication
A vulnerability allowing a low-privileged user to extract saved SSH credentials.
CVE-2026-21669
Crítica · 9.9
CWE-94 12/03/2026
Code Injection em Veeam Veeam Backup & Replication
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
CVE-2026-21668
Média · 6.5
CWE-862 12/03/2026
Missing Authorization em Veeam Veeam Backup & Replication
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.
CVE-2026-21667
Alta · 8.8
CWE-284 12/03/2026
Improper Access Control em Veeam Veeam Backup & Replication
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
CVE-2026-21666
Alta · 8.8
CWE-284 12/03/2026
Improper Access Control em Veeam Veeam Backup & Replication
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
CVE-2025-48984
Alta · 8.8
CWE-94 30/10/2025
Code Injection em Veeam Veeam Backup & Replication
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
CVE-2025-48983
Crítica · 9.9
CWE-284 30/10/2025
Improper Access Control em Veeam Veeam Backup & Replication
A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the Backup infrastructure hosts by an authenticated domain user.