[ CVE-2026-93026 · Published 7 Oct 2026 ]
Vulnerability in Veeam Backup and Replication
CVSS 6.1
EPSS <1%2 agency advisoriesFix available
[ Description ]Official description
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.
[ Fixes ]Fixes and patches
- Security bulletin: Veeam kb4934Vendor patch or bulletin · CERT-FR · veeam.com/kb4934, cited by CERT-FR CERTFR-2026-AVI-1278
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1278
Multiple vulnerabilities in Veeam products Translated from French
Multiple vulnerabilities have been discovered in Veeam products. They allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).
-
BSI CERT-BundWID-SEC-2026-3765
Veeam Backup Enterprise Manager: Multiple vulnerabilities Translated from German