Veeam vulnerabilities

Products

• Backup \& Replication 42
• One 23
• Backup And Replication 21
• Backup And Recovery 19
• Backup & Replication 16
• Agent 12
• Service Provider Console 10
• Service Provider Console 7
• Backup \& Replication 6
• Enterprise Manager 6
• Agent For Windows 4
• Backup Enterprise Manager 4
• Backup For Microsoft 365 4
• Service Provider Console 4
• Backup And Replication 3
• Management Pack For Microsoft System Center 3
• One Reporter 3
• Recovery Orchestrator 3
• Recovery Orchestrator 3
• Agent For Windows 3
• Availability Orchestrator 2
• Backup For Microsoft Azure 2
• One Agent 2
• One Firmware 2
• Software Appliance 2
• Service Provider Console 2

Newest

• veeam management pack for microsoft system center A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform... CVE-2026-107239 8.8 HighOctober 29, 2026
• veeam management pack for microsoft system center A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as... CVE-2026-107238 8.7 HighOctober 29, 2026
• veeam management pack for microsoft system center A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on... CVE-2023-22793 9.3 CriticalOctober 29, 2026
• veeam backup and replication A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP... CVE-2026-108142 9.1 CriticalOctober 27, 2026
• veeam backup and replication A vulnerability allowing an authenticated user with the Restore Operator role, who also controls... CVE-2026-108141 5.9 MediumOctober 27, 2026
• veeam backup and replication A vulnerability allowing an authenticated user with the Restore Operator role, who also controls... CVE-2026-108140 5.9 MediumOctober 27, 2026
• samsung open source one A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor... CVE-2026-107671 8.5 HighOctober 27, 2026
• veeam backup for microsoft 365 A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a... CVE-2026-106078 6.9 MediumOctober 27, 2026
• veeam backup for microsoft 365 A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to... CVE-2026-106077 8.3 HighOctober 27, 2026
• veeam backup for microsoft 365 A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the... CVE-2026-106076 9.0 CriticalOctober 27, 2026
• veeam agent for linux A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only... CVE-2026-105477 7.3 HighOctober 27, 2026
• veeam backup for microsoft 365 A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM... CVE-2025-64394 4.3 MediumOctober 27, 2026
• veeam agent for windows This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to... CVE-2025-64391 4.1 MediumOctober 7, 2026
• veeam backup enterprise manager This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the... CVE-2025-64392 4.8 MediumOctober 7, 2026
• veeam backup and replication This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise... CVE-2026-93026 6.1 MediumOctober 7, 2026
• veeam agent for windows This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate... CVE-2026-58068 6.8 MediumOctober 7, 2026
• veeam backup and replication This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to... CVE-2026-58069 8.3 HighOctober 7, 2026
• veeam backup and replication This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code... CVE-2025-64393 9.4 CriticalOctober 7, 2026
• samsung open source one A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter... CVE-2026-64632 8.5 HighAugust 26, 2026
• veeam backup and replication A vulnerability that records guest OS processing credentials in cleartext in a support log on the... CVE-2026-58070 6.8 MediumAugust 26, 2026
• samsung open source one A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from... CVE-2026-65641 9.3 CriticalAugust 26, 2026
• samsung open source one A vulnerability allowing local privilege escalation to the Reporter service context. CVE-2026-64634 8.4 HighAugust 4, 2026
• samsung open source one A vulnerability allowing remote unauthenticated code execution on the agent host. CVE-2026-64633 Public exploit 10.0 CriticalAugust 4, 2026
• samsung open source one A vulnerability allowing a low-privileged user to inject SQL and extract database contents. CVE-2026-64631 8.6 HighAugust 4, 2026
• samsung open source one A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a... CVE-2026-64630 5.3 MediumAugust 4, 2026
• samsung open source one A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which... CVE-2026-58075 8.7 HighAugust 4, 2026
• samsung open source one A vulnerability allowing a high-privileged user to execute arbitrary code on the server. CVE-2026-58074 8.6 HighAugust 4, 2026
• veeam service provider console A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to... CVE-2026-58073 Public exploit 9.5 CriticalAugust 4, 2026
• veeam service provider console A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management... CVE-2026-58072 9.0 CriticalAugust 4, 2026
• veeam service provider console A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access... CVE-2026-58071 8.2 HighAugust 4, 2026
• veeam service provider console A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust... CVE-2026-58067 8.7 HighAugust 4, 2026
• veeam service provider console Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service... CVE-2026-64635 5.3 MediumJuly 30, 2026
• veeam backup and replication A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a... CVE-2026-56844 8.4 HighJuly 22, 2026
• kerberos-io agent Kerberos Hub private key (X-Kerberos-Hub-PrivateKey) leaked to cross-host redirect target due to redirect-following HTTP client without CheckRedirect CVE-2026-50192 Fix available 6.9 MediumJuly 2, 2026
• veeam backup and replication A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated... CVE-2026-44963 Public exploit 9.4 CriticalJune 9, 2026
• veeam service provider console This vulnerability in Veeam Service Provider Console allows for remote code execution. CVE-2026-32998 9.4 CriticalMay 28, 2026
• veeam backup and replication A vulnerability allowing an authenticated user with the Backup Administrator role to write... CVE-2026-32997 8.6 HighMay 28, 2026
• veeam backup and replication This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. CVE-2026-32996 Public exploit 7.3 HighMay 28, 2026
• veeam backup and replication, software appliance +1 more A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver... CVE-2026-21709 6.7 MediumApril 17, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres... CVE-2026-21708 9.9 CriticalMarch 12, 2026
• veeam backup and replication A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication... CVE-2026-21672 8.8 HighMarch 12, 2026
• veeam software appliance, backup \& replication +1 more A vulnerability allowing an authenticated user with the Backup Administrator role to perform... CVE-2026-21671 9.1 CriticalMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing a low-privileged user to extract saved SSH credentials. CVE-2026-21670 7.7 HighMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on... CVE-2026-21669 10.0 CriticalMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate... CVE-2026-21668 8.8 HighMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on... CVE-2026-21667 10.0 CriticalMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on... CVE-2026-21666 10.0 CriticalMarch 12, 2026
• tenable agent, nessus agent +1 more Improper Access Control Allows Denial of Service CVE-2026-2026 5.4 MediumFebruary 13, 2026
• veeam backup and recovery, backup \& replication +1 more This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the... CVE-2025-59470 Public exploit 9.0 CriticalJanuary 8, 2026
• veeam backup and recovery, backup \& replication +1 more This vulnerability allows a Backup or Tape Operator to write files as root. CVE-2025-59469 9.0 CriticalJanuary 8, 2026
• Show olderLoading…