[ CVE-2026-105477 · Published 27 Oct 2026 ]
Vulnerability in Veeam Agent for Linux
CVSS 7.3
EPSS <1%2 agency advisoriesFix available
[ Description ]Official description
A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected.
[ Fixes ]Fixes and patches
- Security bulletin: Veeam kb4957Vendor patch or bulletin · CERT-FR · veeam.com/kb4957, cited by CERT-FR CERTFR-2026-AVI-1399
- Security bulletin: Veeam kb4951Vendor patch or bulletin · CERT-FR · veeam.com/kb4951, cited by CERT-FR CERTFR-2026-AVI-1399
- Security bulletin: Veeam kb4948Vendor patch or bulletin · CERT-FR · veeam.com/kb4948, cited by CERT-FR CERTFR-2026-AVI-1399
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1399
Multiple vulnerabilities in Veeam products Translated from French
Multiple vulnerabilities have been discovered in Veeam products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
BSI CERT-BundWID-SEC-2026-4212
Veeam Backup & Replication: Multiple vulnerabilities Translated from German