Path Traversal in Veeam Backup And Replication

CVE-2026-56844

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.002 (6.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References