[ Vendor · 11 CVEs ]
Veeam
CVEs affecting Veeam published in the last 30 days, plus any Veeam CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-93026 | 7 Oct 2026 | CVSS 6.1 | Veeam Backup and ReplicationThis vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update… | Fix |
| CVE-2026-58068 | 7 Oct 2026 | CVSS 6.8 | Veeam Agent for WindowsThis vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system. | |
| CVE-2026-58069 | 7 Oct 2026 | CVSS 8.3 | Veeam Backup and ReplicationThis vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. | |
| CVE-2025-64392 | 7 Oct 2026 | CVSS 4.8 | Veeam Backup Enterprise ManagerThis vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link. | Fix |
| CVE-2025-64393 | 7 Oct 2026 | CVSS 9.4 | Veeam Backup and ReplicationThis vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server. | Fix |
| CVE-2025-64391 | 7 Oct 2026 | CVSS 4.1 | Veeam Agent for WindowsThis vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when… | |
| CVE-2024-40711 | 7 Sep 2024 | CVSS 9.8 | Veeam Backup and Replication DeserializationA deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). | Exploited |
| CVE-2024-40711 | 7 Sep 2024 | CVSS 9.8 | Veeam Backup and Replication DeserializationA deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). | Exploited |
| CVE-2023-27532 | 10 Mar 2023 | CVSS 7.5 | Veeam Backup & Replication Cloud Connect Missing Authentication for Critical FunctionVulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead… | Exploited |
| CVE-2022-26500 | 17 Mar 2022 | CVSS 8.8 | Veeam Backup & Replication Remote Code ExecutionImproper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API… | Exploited |
| CVE-2022-26501 | 17 Mar 2022 | CVSS 9.8 | Veeam Backup & Replication Remote Code ExecutionVeeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). | Exploited |