RCE in Veeam Backup And Replication

CVE-2026-21709

A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.000 (1.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References