Veeam Veeam vulnerabilities

• veeam backup and replication, backup \& replication +1 more A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres... CVE-2026-21708 9.9 CriticalMarch 12, 2026
• veeam software appliance, backup \& replication +1 more A vulnerability allowing an authenticated user with the Backup Administrator role to perform... CVE-2026-21671 9.1 CriticalMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing a low-privileged user to extract saved SSH credentials. CVE-2026-21670 7.7 HighMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on... CVE-2026-21669 10.0 CriticalMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate... CVE-2026-21668 8.8 HighMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on... CVE-2026-21667 10.0 CriticalMarch 12, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on... CVE-2026-21666 10.0 CriticalMarch 12, 2026
• veeam backup and recovery, backup \& replication +1 more This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the... CVE-2025-59470 Public exploit 9.0 CriticalJanuary 8, 2026
• veeam backup and recovery, backup \& replication +1 more This vulnerability allows a Backup or Tape Operator to write files as root. CVE-2025-59469 9.0 CriticalJanuary 8, 2026
• veeam backup and recovery, backup \& replication +1 more This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the... CVE-2025-59468 9.0 CriticalJanuary 8, 2026
• veeam backup and recovery, backup \& replication +1 more This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as... CVE-2025-55125 7.8 HighJanuary 8, 2026
• veeam backup and replication, backup \& replication +1 more A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code... CVE-2025-48983 10.0 CriticalOctober 30, 2025
• veeam agent for microsoft windows, agent for windows +1 more This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if... CVE-2025-48982 7.3 HighOctober 30, 2025
• veeam backup and replication, backup \& replication +1 more A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated... CVE-2025-48984 8.8 HighOctober 30, 2025
• veeam backup and recovery, backup \& replication +1 more A vulnerability allowing an authenticated user with the Backup Operator role to modify backup... CVE-2025-24286 EPSS 19.1% 7.2 HighJune 18, 2025
• veeam backup and recovery, backup \& replication +1 more A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated... CVE-2025-23121 EPSS 24.7% 9.9 CriticalJune 18, 2025
• veeam backup and recovery, backup \& replication +1 more A vulnerability allowing remote code execution (RCE) for domain users. CVE-2025-23120 EPSS 24.0% 9.9 CriticalMarch 20, 2025
• veeam backup & replication, backup \& replication +1 more A vulnerability exists where a low-privileged user can exploit insufficient permissions in... CVE-2024-45204 7.7 HighDecember 4, 2024
• veeam agent, agent for windows +1 more DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes... CVE-2024-45207 7.0 HighDecember 4, 2024
• veeam service provider console A vulnerability in Veeam Service Provider Console has been identified, which allows to perform... CVE-2024-45206 6.5 MediumDecember 4, 2024
• veeam backup & replication, backup \& replication +1 more A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose... CVE-2024-42457 7.7 HighDecember 4, 2024
• veeam backup & replication, backup and replication, backup \& replication +2 more A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a... CVE-2024-42456 8.8 HighDecember 4, 2024
• veeam backup & replication, backup and replication, backup \& replication +2 more A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting... CVE-2024-42455 EPSS 15.8% 7.1 HighDecember 4, 2024
• veeam backup & replication, backup \& replication +1 more A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify... CVE-2024-42453 7.4 HighDecember 4, 2024
• veeam agent, backup & replication, backup \& replication +2 more A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent... CVE-2024-42452 8.8 HighDecember 4, 2024
• veeam backup & replication, backup \& replication +1 more A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved... CVE-2024-42451 7.7 HighDecember 4, 2024
• veeam backup & replication, backup and replication, backup \& replication +2 more A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to... CVE-2024-40717 8.8 HighDecember 4, 2024
• veeam enterprise manager, backup \& replication +1 more A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which... CVE-2024-40715 7.7 HighNovember 7, 2024
• veeam backup and recovery, backup \& replication +1 more An improper certificate validation vulnerability in TLS certificate validation allows an attacker... CVE-2024-40714 8.3 HighSeptember 7, 2024
• veeam backup and recovery, backup \& replication +1 more A vulnerability that allows a user who has been assigned a low-privileged role within Veeam... CVE-2024-40713 7.8 HighSeptember 7, 2024
• veeam backup and recovery, backup \& replication +1 more A path traversal vulnerability allows an attacker with a low-privileged account and local access... CVE-2024-40712 7.8 HighSeptember 7, 2024
• veeam backup & replication, backup and recovery, backup \& replication +2 more A deserialization of untrusted data vulnerability with a malicious payload can allow an... CVE-2024-40711 In KEVPublic exploit EPSS 90.4% 9.8 CriticalSeptember 7, 2024
• veeam backup and recovery, backup \& replication +1 more A series of related high-severity vulnerabilities, the most notable enabling remote code... CVE-2024-40710 8.8 HighSeptember 7, 2024
• veeam backup and recovery, backup \& replication +1 more An improper input validation vulnerability that allows a low-privileged user to remotely remove... CVE-2024-39718 8.1 HighSeptember 7, 2024
• veeam service provider console A code injection vulnerability that allows a low-privileged user with REST API access granted to... CVE-2024-39715 8.5 HighSeptember 7, 2024
• veeam service provider console A code injection vulnerability that permits a low-privileged user to upload arbitrary files to... CVE-2024-39714 9.9 CriticalSeptember 7, 2024
• veeam service provider console A code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC... CVE-2024-38651 8.5 HighSeptember 7, 2024
• veeam service provider console An authentication bypass vulnerability can allow a low privileged attacker to access the NTLM... CVE-2024-38650 9.9 CriticalSeptember 7, 2024
• veeam agent, agent for windows +1 more An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local... CVE-2024-29853 7.8 HighMay 22, 2024
• veeam backup enterprise manager, backup & replication, backup \& replication +2 more Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs. CVE-2024-29852 2.7 LowMay 22, 2024
• veeam backup enterprise manager, backup & replication, backup \& replication +2 more Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise... CVE-2024-29851 7.2 HighMay 22, 2024
• veeam backup enterprise manager, backup & replication, backup \& replication +2 more Veeam Backup Enterprise Manager allows account takeover via NTLM relay. CVE-2024-29850 8.8 HighMay 22, 2024
• veeam backup enterprise manager, backup & replication, backup \& replication +2 more Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise... CVE-2024-29849 Public exploit EPSS 38.7% 9.8 CriticalMay 22, 2024
• veeam service provider console Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server... CVE-2024-29212 9.9 CriticalMay 13, 2024
• veeam backup & replication, backup \& replication +1 more Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the... CVE-2023-27532 In KEVPublic exploit EPSS 80.6% 7.5 HighMarch 10, 2023
• veeam backup for google cloud Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass... CVE-2022-43549 9.8 CriticalDecember 5, 2022
• veeam backup & replication, backup \& replication +1 more Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x... CVE-2022-26500 In KEV 8.8 HighMarch 17, 2022
• veeam backup \& replication Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used... CVE-2022-26504 8.8 HighMarch 17, 2022
• veeam backup & replication, backup \& replication +1 more Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). CVE-2022-26501 In KEV 9.8 CriticalMarch 17, 2022
• veeam Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x... CVE-2022-26503 Public exploit 7.8 HighMarch 17, 2022
• Show olderLoading…