Path Traversal in Veeam Backup And Replication
CVE-2026-56844
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.002 (6.7th percentile) — read the EPSS interpretation.
Affected products
- Veeam Backup And Replication — versions 13.0.2